weedhack | AstralClient-1[.]21[.]11[.]jar

General

Target
AstralClient-1.21.11.jar
Size 3.0MB
Sample261024-h2chqaat5p
SHA256 0f5586e7c0cfc4e220a4c6caacd65733388941dd65148aa6b64d050e72b24eed
MD5 81989411eef042f7f7a29710469fc64b
SHA1 86896c8e149a2579e73ca2524315b42615e58397
SHA512 1f0ccfb8b45a33ace7c85459d993436403ea68d28fcee00bb18803ebf2250ed153dfd4887863a6c045b7de5375fcae72dd05057188345a99e7e4355fe26780be
SSDEEP 49152:sLFscqnZ0NdsVtJ7I4xrHAHu7XqU5Nq6gC/DV1Sl3WUJV9sqiVHkpx2:suZuaVta45HAOL5NdxEjLm8U
TLSH
T1BBE533156610D432D057E374F8425E22782692DD7246923F56F2A27FAC1BDFB3FA8A0C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
AstralClient-1.21.11.jar

SHA256 0f5586e7c0cfc4e220a4c6caacd65733388941dd65148aa6b64d050e72b24eed
MD5 81989411eef042f7f7a29710469fc64b
SHA1 86896c8e149a2579e73ca2524315b42615e58397
SHA512 1f0ccfb8b45a33ace7c85459d993436403ea68d28fcee00bb18803ebf2250ed153dfd4887863a6c045b7de5375fcae72dd05057188345a99e7e4355fe26780be
SSDEEP 49152:sLFscqnZ0NdsVtJ7I4xrHAHu7XqU5Nq6gC/DV1Sl3WUJV9sqiVHkpx2:suZuaVta45HAOL5NdxEjLm8U
TLSH
T1BBE533156610D432D057E374F8425E22782692DD7246923F56F2A27FAC1BDFB3FA8A0C
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.