MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6d8939b4aaef87f897e6858389c1d3a79f57e18bbc1ec7d9144e4f1ed461f602. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6d8939b4aaef87f897e6858389c1d3a79f57e18bbc1ec7d9144e4f1ed461f602
SHA3-384 hash:	f3ce27d4cc864b9de8f109b83f3bbf1ff568ce30af2f821aac1ff8c7b8a543f45d7193b60fba27c30769624fd124759d
SHA1 hash:	0694a8c424baf93b029e02eed5a714ecb4eb089a
MD5 hash:	3720f7d9e79c929c16fa3f7f1108be34
humanhash:	georgia-football-california-florida
File name:	6d8939b4aaef87f897e6858389c1d3a79f57e18bbc1ec7d9144e4f1ed461f602.jar
Download:	download sample
Signature	WeedHack Alert Create hunting rule
File size:	25'556'592 bytes
First seen:	2026-10-13 09:15:15 UTC
Last seen:	Never
File type:	jar
MIME type:	application/java-archive
ssdeep	393216:juIlhp77gmpRjQYnOUPA5wwDHcOrZXoA9rRqhyP6BSw9bMPNejesjLFj0QEDyXtz:jh4MRj8159Htd421oyt5N2jpj0IkBk
TLSH	T1054733505BFC9DB7CA7F1033E1D1A8D8BECA61CE93BA60D558EC87F148AF9548280752
TrID	57.8% (.JAR) Minecraft Fabric Mod (24020/2/4) 32.5% (.JAR) Java Archive (13500/1/2) 9.6% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	Kejult
Tags:	jar RAT stealer WeedHack

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

104

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ANY.RUN

Malware family:

n/a

ID:

1

File name:

jar

Verdict:

No threats detected

Analysis date:

2026-10-13 09:19:38 UTC

Tags:

n/a

Link:

https://app.any.run/tasks/2661e986-fd1e-476f-810e-cd6901c3619a

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/91663/

CyberFortress Clean

Verdict:

Clean

Score:

89.3%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ad11af66f551121ba162eef

Tags:

n/a

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

anti-debug expand lolbin macros-on-close obfuscated tracker

Link:

https://www.filescan.io/uploads/6acdf6b39e87c1704ee0fe9c/reports/e2e23d11-ad93-4713-b781-24e0808622b8/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/6d8939b4aaef87f897e6858389c1d3a79f57e18bbc1ec7d9144e4f1ed461f602

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

jar

Link:

https://opentip.kaspersky.com/6d8939b4aaef87f897e6858389c1d3a79f57e18bbc1ec7d9144e4f1ed461f602/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/6d8939b4aaef87f897e6858389c1d3a79f57e18bbc1ec7d9144e4f1ed461f602

CERT.PL MWDB

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=nwettnfk56d7rf7gqwbytqotu6pvpymlxqpmpwiujzhr5vdb6yba._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/261013-k76d4abb49/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.35

Link:

https://yomi.yoroi.company/submissions/6d8939b4aaef87f897e6858389c1d3a79f57e18bbc1ec7d9144e4f1ed461f602

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

WeedHack

jar 6d8939b4aaef87f897e6858389c1d3a79f57e18bbc1ec7d9144e4f1ed461f602

(this sample)

  

Delivery method

Distributed via web download

Cape

https://www.capesandbox.com/analysis/91663/