MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1200a7380e57fac6263c0bd7874af2b9bfca44e509ef160a1006dec6c5adec61. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1200a7380e57fac6263c0bd7874af2b9bfca44e509ef160a1006dec6c5adec61
SHA3-384 hash: 8aef2676314a30e8c11ca6533bb21555d811b652370450031aef29d5f1216461a7e449d660b5a9fce4283434c818aa42
SHA1 hash: 0c82c6f44a013fe758a0521a850b496af808b01e
MD5 hash: 401696c6f882d25991422fe351d2ea12
humanhash: uranus-equal-cup-venus
File name:1200a7380e57fac6263c0bd7874af2b9bfca44e509ef160a1006dec6c5adec61
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-10 10:58:09 UTC
Last seen:2024-07-24 11:23:16 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:Jd5u7mNGtyVf4NfQGPL4vzZq2o9W7Gtx2Y4v:Jd5z/f24GCq2iW7i
Threatray 137 similar samples on MalwareBazaar
TLSH 8CC2D0B2CE8084FFC0CB3432204522CB9F579A72556A7867A750981E7DBCDE0DA7A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
2
# of downloads :
56
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/1200a7380e57fac6263c0bd7874af2b9bfca44e509ef160a1006dec6c5adec61/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-10 11:00:08 UTC
AV detection:
28 of 29 (96.55%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
23b13150f71dd42556df96e743d15153b9db4e650a0183df272cd8cfd1457f84
Jadtre
3dfdc15647d74516f9400143f23c9054b4c1b2beffced00337c10fe121c718d4
Jadtre
82f0312af2c3115aa89fba70906d69cf09db375ff6e1f652de3665287d7b3fb2
Jadtre
9252f1f334efff2b6562c809fdadcbc161cb5d5e87e542443ff9d6c6b4ebfc02
Jadtre
9b395e2a28799fe6274d3639fd7d8c124a6706e79562268dd13a5d3d835155f6
Jadtre
9ded072d70e7b4b41e02c86496f1d1cbbe24b46e042502e4b7896a7bdf7f02b1
Jadtre
c6e40f3bb6d93b0e5157313a4347b5f0ec6cb38189a20f14a651822fa006ae72
Jadtre
dfd63396efea42ddead7cf2266c1816c64a39d87ac2e2a713535f0c654b8a677
Jadtre
f406250d7c75c0a8e66f03c51a4f3dc530ea30fbe96d74e16dccd931624573ae
Jadtre
f99f2ff474de162bf771d4be5d8a2f4cc62c3094b3b8aade2cb137d6a887d0e1
Jadtre
+ 127 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments