MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1b2b5cbd0c104243dfc9e73565932ef8a12874a59e45767d4ba791e833db1866. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1b2b5cbd0c104243dfc9e73565932ef8a12874a59e45767d4ba791e833db1866
SHA3-384 hash: 438b5c1ccb368925b6e2a8b0fcd076e0aa0bccb165acd77ba7de6c7d7eeb26fa6723acf9fd861dcf57bc8e0928357d74
SHA1 hash: 76d615f6796e3452b2d5260ee3278eb7af774d43
MD5 hash: 337d4cea88f3b4f45b6ba6536db876bc
humanhash: social-two-mexico-alaska
File name:1b2b5cbd0c104243dfc9e73565932ef8a12874a59e45767d4ba791e833db1866
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-12 14:32:07 UTC
Last seen:2024-07-24 11:49:24 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:fd5u7mNGtyVfh2vfQGPL4vzZq2oZ7GtxsOW3:fd5z/fhO4GCq2w7C
Threatray 326 similar samples on MalwareBazaar
TLSH 42C2D072CE8080FFC0CB3432208511CB9B575A7265AA7867A750981E7DBC9E0DE7A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
2
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/1b2b5cbd0c104243dfc9e73565932ef8a12874a59e45767d4ba791e833db1866/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-12 14:35:34 UTC
AV detection:
45 of 48 (93.75%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
03b0e4fdee3061b1b1b0daf5a1f82cc6cfb463dae27da5f5d900febb35d2fa71
Jadtre
08ede6e7f7e0d0409181139dd3b705e9170019bf98525fe24e78ec73d72a6eee
Jadtre
2ad194e63da043d9937e92d4ebd6cc4d2fa3137de3fcced36b013a5ae5ed11d8
Jadtre
45a612e2c4ffa2330c457f3cd0921871b1f4cf4f1edb1f7ee826f7885decbab3
Jadtre
4b47d433df4b5e54d768f38b6d000ae799e73d0cb879a3440372ad67e670d9dd
Jadtre
9f2e6518cb1098842d9982a4247b0699fbca1ff1cc3cd9aa532ab0ec8b649fa8
Jadtre
a3e74a30a3e835a514063916814aae65172ed37599c309052008bac926164480
Jadtre
bdf702ecb0df96288c8d955c9f53b4b6c115069227af8a9f2c7eee742a7840ba
Jadtre
d4fba7a2bb5d02501a5df83e8f9e753ecfd093a851166ef817f8499fc6523783
Jadtre
dfb73ad0ff39740b10ead73a6402e48c1e31c1a98a27bde8a0c72890e1342e6a
Jadtre
+ 316 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments