weedhack | zoomify-2[.]15[.]21[.]21[.]11[.]jar

General

Target
zoomify-2.15.21.21.11.jar
Size 8.5MB
Sample261003-v5v6fstdjh
SHA256 83087289d92101178e32dfa480bed7e47da4b00c05de5e06c7f757a7c9b6ed54
MD5 9d50c9eadd85c35a5ffe7f107345391b
SHA1 ea39c29d5198a4025e463d5c972522cdb80e555d
SHA512 7b7b447a6f22e1a9a20c8a8d0f9cfb414fab05e54979d6d8830fa5a0e770505301f72138b1ef85fe4530935c4dec144b55952b6f5c1d80f6049577d8c81c429d
SSDEEP 196608:xsRldAvYld7NGsb44IohpGTiTa32kfB4yJJIwh/osON6cr:+R4vYRxnIcpGTiTa3x54IWbvr
TLSH
T1049633A37CD54738C1B7A3309C8D2C13BC9CD76DD469921FD5B209A6CEA38CA4693239
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
zoomify-2.15.21.21.11.jar

SHA256 83087289d92101178e32dfa480bed7e47da4b00c05de5e06c7f757a7c9b6ed54
MD5 9d50c9eadd85c35a5ffe7f107345391b
SHA1 ea39c29d5198a4025e463d5c972522cdb80e555d
SHA512 7b7b447a6f22e1a9a20c8a8d0f9cfb414fab05e54979d6d8830fa5a0e770505301f72138b1ef85fe4530935c4dec144b55952b6f5c1d80f6049577d8c81c429d
SSDEEP 196608:xsRldAvYld7NGsb44IohpGTiTa32kfB4yJJIwh/osON6cr:+R4vYRxnIcpGTiTa3x54IWbvr
TLSH
T1049633A37CD54738C1B7A3309C8D2C13BC9CD76DD469921FD5B209A6CEA38CA4693239
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.