weedhack | marlowclient-3[.]6[.]jar

General

Target
marlowclient-3.6.jar
Size 59KB
Sample261030-e7fksahs6w
SHA256 dbcbda6c0c38ffef105165c8f08788697488aaf2433c8e2e617ab1a50549e975
MD5 e6d35a3bc366e885bb8d541387924e0d
SHA1 e2daa0e0111d670f776f2386bf576dda67ce13d3
SHA512 3cf5e2966ef1e48a6f8a92ff880f4e2c84aeb0e1ccaa7c270a882b807da2dea7a9b0606030c9cb25e9ed59bd9eabf02e0c153413823ee7ff5f5bdff9a9b12c54
SSDEEP 1536:4HPu8SXbplxFo9xX7x6hRYqFM7ABvUljEoDg2I92o/:sP0bLQLX7aYsomv0g2U2o/
TLSH
T14B53E195ADA588BEC0439073437694B334B904D4261DB19FDEB878A52C8A8AF2F05DEC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
marlowclient-3.6.jar

SHA256 dbcbda6c0c38ffef105165c8f08788697488aaf2433c8e2e617ab1a50549e975
MD5 e6d35a3bc366e885bb8d541387924e0d
SHA1 e2daa0e0111d670f776f2386bf576dda67ce13d3
SHA512 3cf5e2966ef1e48a6f8a92ff880f4e2c84aeb0e1ccaa7c270a882b807da2dea7a9b0606030c9cb25e9ed59bd9eabf02e0c153413823ee7ff5f5bdff9a9b12c54
SSDEEP 1536:4HPu8SXbplxFo9xX7x6hRYqFM7ABvUljEoDg2I92o/:sP0bLQLX7aYsomv0g2U2o/
TLSH
T14B53E195ADA588BEC0439073437694B334B904D4261DB19FDEB878A52C8A8AF2F05DEC
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.