weedhack | marlow-client-v3[.]6[.]jar

General

Target
marlow-client-v3.6.jar
Size 77KB
Sample261026-v7qczsysas
SHA256 5ea95bc89d5891cf5b512229e53fe4c3dea9f92396cced4325ba6de04c13f9d4
MD5 0cf4f13bb845bbf18d84ac50ad6851a6
SHA1 1a5015ebfbd7d88325751e66a375dd434f1be34a
SHA512 fe5491c9459a108a1ef00d0acc159154a67aaee1dd2c5a51e0b823c5347a6f3300f848cc5e9476789887c9064f6d97c51f59ca37d3a441c26f50d0b29c5efb20
SSDEEP 1536:YUytAcY93rVwSBk2Rp9DRC4n2y3lWh5rcX2SxGGmRXkmutNw9yQxYB:/yu9lRTk23642IIh5rNxtRXkm39kB
TLSH
T16C73D1422CDC8629DC27C5346297E373FD6295D8D20CB56B58E165C60C7AC382B1FEEA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
marlow-client-v3.6.jar

SHA256 5ea95bc89d5891cf5b512229e53fe4c3dea9f92396cced4325ba6de04c13f9d4
MD5 0cf4f13bb845bbf18d84ac50ad6851a6
SHA1 1a5015ebfbd7d88325751e66a375dd434f1be34a
SHA512 fe5491c9459a108a1ef00d0acc159154a67aaee1dd2c5a51e0b823c5347a6f3300f848cc5e9476789887c9064f6d97c51f59ca37d3a441c26f50d0b29c5efb20
SSDEEP 1536:YUytAcY93rVwSBk2Rp9DRC4n2y3lWh5rcX2SxGGmRXkmutNw9yQxYB:/yu9lRTk23642IIh5rNxtRXkm39kB
TLSH
T16C73D1422CDC8629DC27C5346297E373FD6295D8D20CB56B58E165C60C7AC382B1FEEA
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.