MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1f12c35aa85e70d248192bbe6a5fc74bf5953a638eed8dfb1cb1227ae0fdf21f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1f12c35aa85e70d248192bbe6a5fc74bf5953a638eed8dfb1cb1227ae0fdf21f
SHA3-384 hash: 0ef36080c8f2f70c1ed375ffdeb025a1f2a06692fab3dac8ecc562f3497f6e6152e0b85157fdfda6db85807c37b113ef
SHA1 hash: 617536d055c1c22cacbb5e90f2aec16a4fbc8f48
MD5 hash: 4c0b10e99c314c75a735a9e9de435ef2
humanhash: saturn-louisiana-connecticut-angel
File name:1f12c35aa85e70d248192bbe6a5fc74bf5953a638eed8dfb1cb1227ae0fdf21f
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-14 18:04:37 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:Fd5u7mNGtyVfljHfQGPL4vzZq2o9W7GTxHoDR:Fd5z/flT4GCq2iW7T
Threatray 388 similar samples on MalwareBazaar
TLSH D2C2C073CE8084FFC0CB3472208512CB9B579672956A6467A710981E7DBCDD0E976753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/1f12c35aa85e70d248192bbe6a5fc74bf5953a638eed8dfb1cb1227ae0fdf21f/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-14 18:05:56 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
1a7f94731f5a806a7561ba82c770675dac4507ed85fd62c7d1bc51fd4cd21722
Jadtre
23d1c42b6e698173e9619da9c6a5fc6bcd210bf5ffbe10b488ca1f78dc36e5a1
Jadtre
65f21c6260515856005b436a7f3c038b7cc66de3084fcc6b7ae948b0d0e1ce02
Jadtre
6be80e93dfa0b4687c4e5a88adc1b16ad1870e6990fc054b817edeb9b37f33b9
Jadtre
7bd41098acc4c07cf156dcf57ebf6c5b297c54c6279c1f064e520625cabbeba9
Jadtre
baa82a39ef6d0de90061106cd7e02e8a7c56ccb0d370737ed9aa4749f24c0798
Jadtre
c1846a5f77b09f059b009ea76004fe57a2cc66bb25e5c744a5fad7513b28095a
Jadtre
eeeb9792f0292fe71265d4851f1e016789f3932538e5ee25d9f635762ee7cd21
Jadtre
f1e16fc3e0f241ea837a2a3ddf735baa20a99ac888948045b9da12502d43cdcd
Jadtre
f406250d7c75c0a8e66f03c51a4f3dc530ea30fbe96d74e16dccd931624573ae
Jadtre
+ 378 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Vflooder
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/1f12c35aa85e70d248192bbe6a5fc74bf5953a638eed8dfb1cb1227ae0fdf21f

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments