MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 358c0d77183f28495b14fa895aa02660ea9152bd1be4caac5c5e280156d37169. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 358c0d77183f28495b14fa895aa02660ea9152bd1be4caac5c5e280156d37169
SHA3-384 hash: c421cbb658856521f35d5b39ea6ba9366f4825c7881b158897bcc2dd2c7ee28ebc08e2f2678d493cd03520246f8e17b6
SHA1 hash: 3b3c2c437ac4c601ac68525ad2fba79fa36a48bc
MD5 hash: 734a7b2b7acfa50b1206c19ebc353a14
humanhash: maryland-magnesium-august-queen
File name:ae7e0086d15df22fca10af9188071452
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 15:34:24 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:9d5u7mNGtyVfUFlQGPL4vzZq2o9W7G8xHCBC:9d5z/fGCGCq2iW70
Threatray 1'572 similar samples on MalwareBazaar
TLSH B7C2D0B2CE8080FFC0CF3072208522CB9B175A72956A68A7E750881E7DBCDD0E976753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
67
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Sending a UDP request
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/358c0d77183f28495b14fa895aa02660ea9152bd1be4caac5c5e280156d37169/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 15:37:23 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
10512a0b17c312658c58f95b07d55f0614f1127f4d278600ad1d3cffd563ab80
Jadtre
1475066761d9eb988fb53454e4c002522061f2d3fe3135b4e8560e24b65dbc58
Jadtre
4b2bc080dfadc95c35726dee2b6618d435036e2a44bb85446406f512c94af265
Jadtre
6a2922edb458a5930b6cdd357c6e07b3820e913cfbc6e9d0ab9a767e803c4c02
Jadtre
7e09cf09d72b11e02d74ad3cbc6d10641763e52de83514d6cc2c131dc8f39903
Jadtre
8822309a8eb5ab1679f777dde766cee6553a83b7111468f2ee2abee8b1c94a3e
Jadtre
90f7042e37737091ac8c13a1256eb65b8914c7e7ca4619a89a42722231989393
Jadtre
93001ce4a861481e868ed338b0c84800f040d0a7600595678dffbbf4c95c9af3
Jadtre
e83bd8da11c7cb42f93efb480d7d8115cde53aa465ca15304c493d5931dd6ef0
Jadtre
fef241bfdec9b1aca7e89587c96626c90ed9d0aeddadfab9f14b71b683769084
Jadtre
+ 1'562 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
358c0d77183f28495b14fa895aa02660ea9152bd1be4caac5c5e280156d37169
MD5 hash:
734a7b2b7acfa50b1206c19ebc353a14
SHA1 hash:
3b3c2c437ac4c601ac68525ad2fba79fa36a48bc
Link:
https://www.unpac.me/results/8ab20a55-18f0-4d83-8795-c3421d4b0441/
SH256 hash:
69a9d74e0e00b2854e7ef2c60ac1bafc377d3c9f37fa65d396f482090556ea6d
MD5 hash:
4ab7a90be89567a0aadb905c3469f83e
SHA1 hash:
a0735e6025de34e16c8416f4d696edec721e3c21
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/8ab20a55-18f0-4d83-8795-c3421d4b0441/
SH256 hash:
a1d3cf9d788d85a091f4a98b3d47a42f4ee8d4946b7c55a017dd2cd21ef8b70f
MD5 hash:
262fa8702539f372ec03ffd359074646
SHA1 hash:
9b85ac8fa49f9f96a6ae946adf8ff2f2ab346185
Link:
https://www.unpac.me/results/8ab20a55-18f0-4d83-8795-c3421d4b0441/
SH256 hash:
6d692d4cdc7c6efa59c7308637483e7aaeaad6b84b2e8bb3eb0e08ae536d1074
MD5 hash:
2792b75d6de18b82165166ec9a5ce6a6
SHA1 hash:
b873e766d1644718b57be2a585c230c76d5a0f5c
Link:
https://www.unpac.me/results/8ab20a55-18f0-4d83-8795-c3421d4b0441/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments