MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4c7ab766875cbaa5c8ab9bb3547b7d000dc793765825c35c6db01f5c73db9ab6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


WeedHack


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4c7ab766875cbaa5c8ab9bb3547b7d000dc793765825c35c6db01f5c73db9ab6
SHA3-384 hash: e8f210451ee875cac0db1cbc8eb11a573897ad64f74e5e4f50102e018c54f551a09050f51cbf8ab410d91ea2a90c723d
SHA1 hash: 28a7830b6c02df25aba3f0710666b0f752c44483
MD5 hash: 8cdc27f1b1111c8a29324b857b77f1fe
humanhash: cat-bluebird-sodium-bravo
File name:733184ba4_gambling-rig-121x2.jar
Download: download sample
Signature WeedHack
Create hunting rule
File size:1'041'426 bytes
First seen:2026-04-05 11:46:24 UTC
Last seen:Never
File type:Java file jar
MIME type:application/zip
ssdeep 24576:RDtxJ+pSreB+QTgXyrSH+wM1vPSlYyjVQ3YglTyD:R5XGTIyeewyPSldhENMD
TLSH T195251273F0AC0E9EF57FC9FB4400656378ADA4EED44B70292670458694B388ED7263AD
TrID 77.1% (.JAR) Java Archive (13500/1/2)
22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter burger
Tags:adamrat jar RAT WeedHack

Intelligence

File Origin
# of uploads :
1
# of downloads :
70
Origin country :
DE DE
Vendor Threat Intelligence
Gathering data
Malware family:
n/a
ID:
1
File name:
733184ba4_gambling-rig-121x2.jar-embed-launcher.exe
Verdict:
Malicious activity
Analysis date:
2026-04-05 11:40:14 UTC
Tags:
golang github antivm etherhiding evasion anti-evasion python stealer weedhack auto rustystealer websocket pyinstaller crypto-regex
Link:
https://app.any.run/tasks/18e99a23-a45f-4615-b9f9-212a6d19c344

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/60485/
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.79861717.17054.9250.UNOFFICIAL
Create hunting rule

Verdict:
Clean
Score:
89.3%
Link:
https://cyber-fortress.com/docs/result/index.php?id=69d24bbd6a61012f6acefc65
Tags:
n/a
Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Tags:
anti-debug obfuscated
Link:
https://www.filescan.io/uploads/69d24bb8972c219c8d7900a0/reports/18230f06-e2fd-4b21-b163-a72ae6a06600/overview
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/4c7ab766875cbaa5c8ab9bb3547b7d000dc793765825c35c6db01f5c73db9ab6
Verdict:
Malicious
File Type:
jar
First seen:
2026-04-05T08:45:00Z UTC
Last seen:
2026-04-06T10:13:00Z UTC
Hits:
~10
Detections:
HEUR:Trojan-Dropper.Java.Agent.gen
Link:
https://opentip.kaspersky.com/4c7ab766875cbaa5c8ab9bb3547b7d000dc793765825c35c6db01f5c73db9ab6/results?tab=lookup
Result
Threat name:
n/a
Detection:
suspicious
Classification:
n/a
Score:
22 / 100
Link:
https://www.joesandbox.com/analysis/1893769
Signature
Joe Sandbox ML detected suspicious sample
Behaviour
Behavior Graph:
Download SVG
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1893769 Sample: 733184ba4_gambling-rig-121x2.jar Startdate: 05/04/2026 Architecture: WINDOWS Score: 22 12 Joe Sandbox ML detected suspicious sample 2->12 6 cmd.exe 2 2->6         started        process3 process4 8 java.exe 3 6->8         started        10 conhost.exe 6->10         started       
Score:
5%
Verdict:
Benign
File Type:
ARCHIVE
Link:
https://malprob.io/report/4c7ab766875cbaa5c8ab9bb3547b7d000dc793765825c35c6db01f5c73db9ab6
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/4c7ab766875cbaa5c8ab9bb3547b7d000dc793765825c35c6db01f5c73db9ab6/
Verdict:
Malicious
Threat:
Family.WEEDHACK
Link:
https://tip.neiki.dev/file/4c7ab766875cbaa5c8ab9bb3547b7d000dc793765825c35c6db01f5c73db9ab6
Threat name:
Package.Trojan.Qwexlafiba
Create hunting rule
Status:
Malicious
First seen:
2026-04-05 11:47:41 UTC
File Type:
Package (Java)
Extracted files:
255
AV detection:
5 of 24 (20.83%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=jr5lozuhls5klsfltozvi635aag4pe3wlas4gxdnwapvy463tk3a._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Link:
https://tria.ge/reports/260405-nxwzfsaz2t/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.35
Link:
https://yomi.yoroi.company/submissions/4c7ab766875cbaa5c8ab9bb3547b7d000dc793765825c35c6db01f5c73db9ab6

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

WeedHack

Java file jar 4c7ab766875cbaa5c8ab9bb3547b7d000dc793765825c35c6db01f5c73db9ab6

(this sample)

  
Link
https://jlab.threat.rip/report/d8e2df81-8ddb-49fb-8d78-4716d270892b
Cape
Cape
https://www.capesandbox.com/analysis/60485/
  
URLhaus
https://urlhaus.abuse.ch/url/3812780/
  
Delivery method
Distributed via web download

Comments