MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 538206dcf29e5aeb39fa9b6ea2238fd49d5d8331c428a5d7b3026b56ab78483e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


WeedHack


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 538206dcf29e5aeb39fa9b6ea2238fd49d5d8331c428a5d7b3026b56ab78483e
SHA3-384 hash: 342532d9835ab79c7869eb40d2dc85713e622329035db6af0f758f390e7a4e9cf2c0f0de4661efca135df072a346bbca
SHA1 hash: 75b6733d0164d6c5c649ceb97915b38e279443f4
MD5 hash: 5e9c309ec38d2aa6a0eca5285a9b4b34
humanhash: summer-vermont-vermont-cold
File name:538206dcf29e5aeb39fa9b6ea2238fd49d5d8331c428a5d7b3026b56ab78483e.jar
Download: download sample
Signature WeedHack
Create hunting rule
File size:532'208 bytes
First seen:2026-06-27 16:26:29 UTC
Last seen:Never
File type:Java file jar
MIME type:application/zip
ssdeep 12288:h0k4nS2Z/7pfDzy4QSEn8khpl44BIJjD5Js5chO6PP8piOP:ukuNZjC8Sv44ud9gcoEGiO
TLSH T1ABB4EF67F9690AA5E92FC9FEC0408913746C95D1B90FB0AE327416554CE3E8CBB0F6B4
TrID 57.8% (.JAR) Minecraft Fabric Mod (24020/2/4)
32.5% (.JAR) Java Archive (13500/1/2)
9.6% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter BastianHein
Tags:jar WeedHack

Intelligence

File Origin
# of uploads :
1
# of downloads :
68
Origin country :
CL CL
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
538206dcf29e5aeb39fa9b6ea2238fd49d5d8331c428a5d7b3026b56ab78483e.jar
Verdict:
Malicious activity
Analysis date:
2026-06-27 15:59:59 UTC
Tags:
stealer weedhack etherhiding
Link:
https://app.any.run/tasks/fc3192d8-4cb6-4ccd-8505-46a96365a7df

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/72227/
Detection(s):
SecuriteInfo.com.Trojan.Java.Agent.24214.28094.UNOFFICIAL
Create hunting rule

Verdict:
Malicious
Score:
90.2%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6a3ff37e86bc95245bf9ffe7
Tags:
java
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/538206dcf29e5aeb39fa9b6ea2238fd49d5d8331c428a5d7b3026b56ab78483e
Verdict:
Malicious
File Type:
jar
First seen:
2026-06-27T13:08:00Z UTC
Last seen:
2026-06-28T01:51:00Z UTC
Hits:
~10
Detections:
HEUR:Trojan-Dropper.Java.Agent.gen
Link:
https://opentip.kaspersky.com/538206dcf29e5aeb39fa9b6ea2238fd49d5d8331c428a5d7b3026b56ab78483e/results?tab=lookup
Score:
0%
Verdict:
Benign
File Type:
ARCHIVE
Link:
https://malprob.io/report/538206dcf29e5aeb39fa9b6ea2238fd49d5d8331c428a5d7b3026b56ab78483e
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/538206dcf29e5aeb39fa9b6ea2238fd49d5d8331c428a5d7b3026b56ab78483e/
Verdict:
Malicious
Threat:
Family.WEEDHACK
Link:
https://tip.neiki.dev/file/538206dcf29e5aeb39fa9b6ea2238fd49d5d8331c428a5d7b3026b56ab78483e
Threat name:
Package.Trojan.Egairtigado
Create hunting rule
Status:
Malicious
First seen:
2026-06-27 16:00:02 UTC
File Type:
Package (Java)
Extracted files:
328
AV detection:
8 of 24 (33.33%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=kobanxhstznowop2tnxkei4p2sov3azryquklv5tajvvnk3yja7a._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Link:
https://tria.ge/reports/260627-tyb9bsbx6v/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.35
Link:
https://yomi.yoroi.company/submissions/538206dcf29e5aeb39fa9b6ea2238fd49d5d8331c428a5d7b3026b56ab78483e

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Cape
Cape
https://www.capesandbox.com/analysis/72227/

Comments