MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 20874eb1bcf4ef2b37425ebdd517ce733feed63ea856d82901df7ff994a10d13. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 20874eb1bcf4ef2b37425ebdd517ce733feed63ea856d82901df7ff994a10d13
SHA3-384 hash: c61dc731997e3338819086e622097fa6e540d96f5261eefdd5ad983ddf3d5d5c08afcd896b82a5d98ed91d04b7c5b989
SHA1 hash: 2f9fbdf4e6ddef1a40da812dc5419e7bd266ec83
MD5 hash: 4467833614a2d395ea934a644666131b
humanhash: steak-utah-early-kitten
File name:20874eb1bcf4ef2b37425ebdd517ce733feed63ea856d82901df7ff994a10d13
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-12 14:40:22 UTC
Last seen:2024-07-24 12:04:07 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:ld5u7mNGtyVfYxfQGPL4vzZq2oZ7Gtx5A7:ld5z/fa4GCq2w70
Threatray 333 similar samples on MalwareBazaar
TLSH 98C2D072CE8080FFC0CB3472208521CB9B579A72A57A6467E750981E7DBCDE0DA7A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
2
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/20874eb1bcf4ef2b37425ebdd517ce733feed63ea856d82901df7ff994a10d13/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-12 14:45:35 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
1d66abdfdcb7679911eab8d1541111695809b8fb867265ad5b53376d1c57e31e
Jadtre
83f83dbbd3e0f1d6e60041c0f34a9fb657aa22ebf50a68b1dbb8a9944760514a
Jadtre
8c0593fe387aa6b741ede72da6fe6865cd16e0132075ef504f49e91e8c59c03b
Jadtre
a72be1704df20fab28240c1f1f4fb08f5a22a7a77c7aae8af859d1da49f1b6f2
Jadtre
b611bdb41f5e012428aafe44fade31cf0ef8920164cf6bed05cb348673447b89
Jadtre
cdb8e8b7184873f01ee9c6440dd5cbb557b37d687cc09b29cec71a34d1db070a
Jadtre
d4fba7a2bb5d02501a5df83e8f9e753ecfd093a851166ef817f8499fc6523783
Jadtre
df9e5d5600c0e58c0a7aee60839d083c9bca51891f4730b1d39402b40fe01bdc
Jadtre
e7de2449457d9b8a285a423150eb03a98dff39e1790fd64989a805c1a392284d
Jadtre
ec3716803f6398c6a79a067b1c171029cfdfb0cb33e9f23ce1dd87cc007bab82
Jadtre
+ 323 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments