MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e8c2f5264a094f9964077b4c0561494de8953f5e137c2c3a00205340f6353293. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



WeedHack


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments

SHA256 hash: e8c2f5264a094f9964077b4c0561494de8953f5e137c2c3a00205340f6353293
SHA3-384 hash: 366501a88bd90b3b23afed768615c55e34dd204bf94bbbfdd52fb936b295680c6242ac805657c4c6fce41d5de0e8843a
SHA1 hash: e4e5a845cc3c73aab99e0e94f978911545841fa8
MD5 hash: 783816d8a7638d107191eaa3fb90c67b
humanhash: juliet-don-ink-fruit
File name:yzvvrb5k_GlazedAddon-1.21.4.jar
Download: download sample
Signature WeedHack
File size:322'250 bytes
First seen:2026-05-18 18:49:34 UTC
Last seen:Never
File type:Java file jar
MIME type:application/java-archive
ssdeep 6144:r62DFZnKy6VyNW/juMM8qhnuqrid9pBOKjqmSs8HA:22DFZJwiMM8Anp8bBJjpQHA
TLSH T18364F909FDC5E428F013B13C02005567672A96CAA729F3F716DBAD4C69B5F760E0AAC7
TrID 77.1% (.JAR) Java Archive (13500/1/2)
22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter burger
Tags:jar WeedHack

Intelligence


File Origin
# of uploads :
1
# of downloads :
101
Origin country :
US US
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
yzvvrb5k_GlazedAddon-1.21.41.jar
Verdict:
Malicious activity
Analysis date:
2026-05-18 18:17:09 UTC
Tags:
stealer weedhack etherhiding evasion

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Verdict:
Malicious
File Type:
jar
First seen:
2026-05-18T15:03:00Z UTC
Last seen:
2026-05-20T08:50:00Z UTC
Hits:
~10
Detections:
HEUR:Trojan.Java.Generic
Result
Threat name:
n/a
Detection:
suspicious
Classification:
n/a
Score:
22 / 100
Signature
Joe Sandbox ML detected suspicious sample
Behaviour
Behavior Graph:
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1915252 Sample: yzvvrb5k_GlazedAddon-1.21.4.jar Startdate: 18/05/2026 Architecture: WINDOWS Score: 22 12 Joe Sandbox ML detected suspicious sample 2->12 6 cmd.exe 2 2->6         started        process3 process4 8 java.exe 3 6->8         started        10 conhost.exe 6->10         started       
Threat name:
ByteCode-JAVA.Trojan.Generic
Status:
Suspicious
First seen:
2026-05-15 21:54:20 UTC
File Type:
Binary (Archive)
Extracted files:
765
AV detection:
5 of 24 (20.83%)
Threat level:
  5/5
Gathering data
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

WeedHack

Java file jar e8c2f5264a094f9964077b4c0561494de8953f5e137c2c3a00205340f6353293

(this sample)

  
Delivery method
Distributed via web download

Comments