MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1af7e015db339ef9ca72826299b6418c56eed12cc9ecf047c32b2eb677ed2b70. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1af7e015db339ef9ca72826299b6418c56eed12cc9ecf047c32b2eb677ed2b70
SHA3-384 hash: ab1766449764d27509aeead22de3353aebe64464a3d0d6518abdc675b3e2f8fa2b2106a00b534ccfb67b2567735d238b
SHA1 hash: 29cabb849e07e54699f2047d5c16da75bfb6178d
MD5 hash: 392e4f4bb7172626285fcc2b8029c831
humanhash: nebraska-robert-sweet-pluto
File name:1af7e015db339ef9ca72826299b6418c56eed12cc9ecf047c32b2eb677ed2b70
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-12 14:14:54 UTC
Last seen:2024-07-24 11:48:50 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:7d5u7mNGtyVfvHmQGPL4vzZq2o9W7GtxHF1N:7d5z/fvdGCq2iW7E
Threatray 353 similar samples on MalwareBazaar
TLSH F8C2D073CE8080FFC0CB3472204521CBAB575A72A5BA7867A710981E7DBC9E0DA76753
Reporter seifreed

Intelligence

File Origin
# of uploads :
2
# of downloads :
53
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/1af7e015db339ef9ca72826299b6418c56eed12cc9ecf047c32b2eb677ed2b70/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-12 14:17:49 UTC
AV detection:
38 of 48 (79.17%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
07dc2cae65a7a4ec6171db10ee2495bc5b7deaf99d125ab9a841a264aa89251c
Jadtre
25f84cb9a821f512bcf3da2fd3061e8a1cde67a77826e28103bd413ec855796c
Jadtre
309edd28dcd86b77186d45da0823308db0e825c77062bf7d04f4609456ae6db2
Jadtre
68d2bceea00c4327471b020c76f5c1b4312c1250520b112b580fbe134f2a87d1
Jadtre
b611bdb41f5e012428aafe44fade31cf0ef8920164cf6bed05cb348673447b89
Jadtre
dfb73ad0ff39740b10ead73a6402e48c1e31c1a98a27bde8a0c72890e1342e6a
Jadtre
e5a858bf6e017751d6bc91eb761236fe584823d2106a690757216c4747f74959
Jadtre
f300f0c0a6a2bccb105394bea1ad5612a283b84f4be9b89472ef9fe7a11cc22a
Jadtre
f8153007eb292cee87f84e708c1e7a9c41298d6e9aa5cd928433f4ccfdcb5024
Jadtre
ffac90760cd6fd62be45fc616ebf4c69bcc6ba22b3f0778603f5a78e6026babc
Jadtre
+ 343 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments