weedhack | NoChatReports-FABRIC-1[.]21[.]11-v2[.]18[.]0 (1)[.]jar

General

Target
NoChatReports-FABRIC-1.21.11-v2.18.0 (1).jar
Size 8.5MB
Sample261023-rba2msb14s
SHA256 34e94d53cec1e564307c62ee327acf3b63dcf5e3803f01cc635773d29695c607
MD5 2a915f2727968c827769cdf240c3061e
SHA1 ef3854fde56ee75134cfa348d9bfbfbb07115734
SHA512 0f2d1ba958afa8ee41baa99133c4ce01e14a6f05840c5439b3fcc52903c54045b70d5bd9871b17d7a00b0bd85994c75e5daf29dfe77704530c334c16716a87ca
SSDEEP 196608:msnldBHqldfNXsT44tmJFGore9HQ2UoTDguweCOhugWyL0:RnpHqNcPtuFGsuHQ2UVuwnaPWw0
TLSH
T1339633EA1DD5523DD1F3A333AC492C13BC9ED66DC029E15F7A720D9644E24E846A323A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
NoChatReports-FABRIC-1.21.11-v2.18.0 (1).jar

SHA256 34e94d53cec1e564307c62ee327acf3b63dcf5e3803f01cc635773d29695c607
MD5 2a915f2727968c827769cdf240c3061e
SHA1 ef3854fde56ee75134cfa348d9bfbfbb07115734
SHA512 0f2d1ba958afa8ee41baa99133c4ce01e14a6f05840c5439b3fcc52903c54045b70d5bd9871b17d7a00b0bd85994c75e5daf29dfe77704530c334c16716a87ca
SSDEEP 196608:msnldBHqldfNXsT44tmJFGore9HQ2UoTDguweCOhugWyL0:RnpHqNcPtuFGsuHQ2UVuwnaPWw0
TLSH
T1339633EA1DD5523DD1F3A333AC492C13BC9ED66DC029E15F7A720D9644E24E846A323A
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.