MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1f4d77a8644408778c03df1a2504888eb585b1a6628c449ca3face600e0d8535. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



WeedHack


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments

SHA256 hash: 1f4d77a8644408778c03df1a2504888eb585b1a6628c449ca3face600e0d8535
SHA3-384 hash: 8a154e50c2b735d7cebd325a1656cb1a3bb2a7def238a98c724fa6774962365b891089026f773552be6ebba6d870a349
SHA1 hash: d16bc1a36da7f116e9215dd7137e82e638b7d6f7
MD5 hash: 0dfc783bb49ef2992382cb2f8574f1f1
humanhash: spring-july-bakerloo-fillet
File name:ImmediatelyFast-1.8.61.21.4 (1).jar
Download: download sample
Signature WeedHack
File size:659'594 bytes
First seen:2026-03-01 10:57:49 UTC
Last seen:Never
File type:Java file jar
MIME type:application/zip
ssdeep 12288:E1GSVG4nKScxVEZLJhAdo2672EIl00D1le+3MDjDpBu5ch66Hv4FG47:E1D9YVa/Ay7740ore+cX9Wc0UuGe
TLSH T155E40173F60B097EFA1BC07750408921B87C95F6854B326FB5B0091A5897ACB5BB8BDC
TrID 57.8% (.JAR) Minecraft Fabric Mod (24020/2/4)
32.5% (.JAR) Java Archive (13500/1/2)
9.6% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter burger
Tags:jar RAT WeedHack

Intelligence


File Origin
# of uploads :
1
# of downloads :
85
Origin country :
NL NL
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
ImmediatelyFast-1.8.61.21.41.jar
Verdict:
No threats detected
Analysis date:
2026-03-01 10:57:42 UTC
Tags:
java

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Result
Threat name:
n/a
Detection:
suspicious
Classification:
n/a
Score:
22 / 100
Signature
Joe Sandbox ML detected suspicious sample
Behaviour
Behavior Graph:
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1876449 Sample: ImmediatelyFast-1.8.61.21.4... Startdate: 01/03/2026 Architecture: WINDOWS Score: 22 12 Joe Sandbox ML detected suspicious sample 2->12 6 cmd.exe 2 2->6         started        process3 process4 8 java.exe 3 6->8         started        10 conhost.exe 6->10         started       
Threat name:
Package.Trojan.Generic
Status:
Suspicious
First seen:
2026-03-01 10:57:46 UTC
File Type:
Package (Java)
Extracted files:
400
AV detection:
4 of 24 (16.67%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments