MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 13048505f556d6ea56269b68d126582245a8bfe9e7d06c932b9570c4a0ef5276. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 13048505f556d6ea56269b68d126582245a8bfe9e7d06c932b9570c4a0ef5276
SHA3-384 hash: ce3cf062b57b5df30286bb834f248ef06a4ab35c8ccb59897c42633cf5ed217f355f73de8528838fe1534166b5b2ab0e
SHA1 hash: b108eecd1c883bf23d6037a2775c66b2f4f26d52
MD5 hash: 1138699bf52bc690b4ef1589efefa641
humanhash: arizona-autumn-kitten-idaho
File name:ae9d4849b80c022be9558ebfa4196d61
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 14:09:53 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:Md5u7mNGtyVfvcmlQGPL4vzZq2oZ7G2xwOU:Md5z/fvxCGCq2w7g
Threatray 1'366 similar samples on MalwareBazaar
TLSH 89C2CF72CE8090FFC0CB3072204522DBAB535A7295AA7867A710981E7DBC9D0EA76753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
54
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Sending a UDP request
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Modifying an executable file
Connection attempt
Sending an HTTP POST request
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/13048505f556d6ea56269b68d126582245a8bfe9e7d06c932b9570c4a0ef5276/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 14:11:33 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
20874eb1bcf4ef2b37425ebdd517ce733feed63ea856d82901df7ff994a10d13
Jadtre
250edafbb840aecfd7fd6fed35e8fee7f8b23c3e30ac3637a05e8fdcba457f19
Jadtre
2e35c7a0c7fdd4e9e04bff50f8ad4546c80d78066e81dc63bf35324e01f62204
Jadtre
3a37861ffad4b31c02376c1bb5f902f64711830d659f189e96018d789b0e0005
Jadtre
65a6c8c0716f15afc90426e6b1bdeb6d15b073c76dd282d7c0181d05483654fc
Jadtre
874b34cc9e9bc898a4de3da11f010757ad34702972a2780d1d335006e9f4de4d
Jadtre
8c0593fe387aa6b741ede72da6fe6865cd16e0132075ef504f49e91e8c59c03b
Jadtre
c5be9cbf2f15419ab331ca9310a2dfd0c3fde553e1ebee1bb89cf441a7e873ad
Jadtre
cdb8e8b7184873f01ee9c6440dd5cbb557b37d687cc09b29cec71a34d1db070a
Jadtre
e7de2449457d9b8a285a423150eb03a98dff39e1790fd64989a805c1a392284d
Jadtre
+ 1'356 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
13048505f556d6ea56269b68d126582245a8bfe9e7d06c932b9570c4a0ef5276
MD5 hash:
1138699bf52bc690b4ef1589efefa641
SHA1 hash:
b108eecd1c883bf23d6037a2775c66b2f4f26d52
Link:
https://www.unpac.me/results/3aaa4779-e5b7-45d2-8369-866160bcf879/
SH256 hash:
0b25b667c508d6cdefc946ab2a755eebb8643c147bb5d3e7b2f9f339ce5804a2
MD5 hash:
9b426d456a3333c26876254ff825f7e3
SHA1 hash:
79c19b69b21a7b01cb35afec8003f4f1edff282e
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/3aaa4779-e5b7-45d2-8369-866160bcf879/
SH256 hash:
7938efbfef7db242cc1dbd5aef4114c4fcfe6efe3f95bd5d163c4165c58b68bf
MD5 hash:
d83b5ca715007601609a26c34ffa9e23
SHA1 hash:
33decada0bd636cb87bd8aae7ccea9ca41389f2a
Link:
https://www.unpac.me/results/3aaa4779-e5b7-45d2-8369-866160bcf879/
SH256 hash:
8e9ece6f855f68b0aced91516eabe60d5c125b36aab6cd9d908074d7a646143b
MD5 hash:
d13940ec0fb36ab2f384d40d1ee71a5a
SHA1 hash:
6d7a7ea2c666fd2045b2c841697735a06909fdc4
Link:
https://www.unpac.me/results/3aaa4779-e5b7-45d2-8369-866160bcf879/
SH256 hash:
0424a4b9a3c6b9535e3614a886693476d1ee52165af8a9eb0e787a27a9cc5a32
MD5 hash:
434678b480b458b673e595b8f1b9b227
SHA1 hash:
aec3f6153f5b84beace75f297be07c50c50fb563
Link:
https://www.unpac.me/results/3aaa4779-e5b7-45d2-8369-866160bcf879/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments