weedhack | balm-fabric-1[.]21[.]11-21[.]11[.]9[.]1_1[.]jar

General

Target
balm-fabric-1.21.11-21.11.9.1_1.jar
Size 9.0MB
Sample261009-1vmdfsfs4t
SHA256 396ce21de2962f46fb231d578770a6e5844fd36c8a3f1629434fbfa3c295616b
MD5 7959f1a49c7bfeb83c76eea5361c79fb
SHA1 5d67bbce27527be6a9e28d2ff76654e4c0a317be
SHA512 5080b86aed1dc68e5388ee3b725799b8dd8cff2cd65572f07c0e7dabcb3055d2d1ede14c9e6a82d3f8fd2522ca308254d9ff2eaa4ba8cf1326206677e1a3e9c2
SSDEEP 196608:HsNm9gnVTildDNJs344SK15Ge/QiJB2ND0dthKaJ3r:MDnVTiJ27SO5Ge46Oavt
TLSH
T1E49633E369940339C177B730BD993C137C9ED67DF0A891AE1AB5089254B39EB06D3239
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
balm-fabric-1.21.11-21.11.9.1_1.jar

SHA256 396ce21de2962f46fb231d578770a6e5844fd36c8a3f1629434fbfa3c295616b
MD5 7959f1a49c7bfeb83c76eea5361c79fb
SHA1 5d67bbce27527be6a9e28d2ff76654e4c0a317be
SHA512 5080b86aed1dc68e5388ee3b725799b8dd8cff2cd65572f07c0e7dabcb3055d2d1ede14c9e6a82d3f8fd2522ca308254d9ff2eaa4ba8cf1326206677e1a3e9c2
SSDEEP 196608:HsNm9gnVTildDNJs344SK15Ge/QiJB2ND0dthKaJ3r:MDnVTiJ27SO5Ge46Oavt
TLSH
T1E49633E369940339C177B730BD993C137C9ED67DF0A891AE1AB5089254B39EB06D3239
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.