MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3689e80c25e9a4f90db62a86f8a2244d0d33075cf4c0e1bba3397a0dfad10692. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3689e80c25e9a4f90db62a86f8a2244d0d33075cf4c0e1bba3397a0dfad10692
SHA3-384 hash: d88e46d7eaa44c0228a9eee87849d45767c3374ac4e76395409972be37e801ccc0f9f0df5ac160072719be6f7fa9d6f9
SHA1 hash: c52ac05a5f276b51d409c957c7826529ee12df5a
MD5 hash: 1564202254df1f52456ee6c147e28769
humanhash: skylark-ceiling-asparagus-gee
File name:ae76def5874539efb8ad0754558a871d
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 14:49:48 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:Vd5u7mNGtyVfhg3QGPL4vzZq2oZ7GtxF8WF:Vd5z/fhNGCq2w7X
Threatray 1'263 similar samples on MalwareBazaar
TLSH FFC2D072CE8080FFC0CB3472204522CB9F575A72557A6867A710981E7DBCDE0EA7A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
56
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/3689e80c25e9a4f90db62a86f8a2244d0d33075cf4c0e1bba3397a0dfad10692/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 14:51:44 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
0ada5364bf4937452e668cf369e617e951570e06307fdf88861ee1dc37608ab4
Jadtre
3ebf5bddb473da496d17808633741a25fe2deadcbcfbb2e84c05fa8e7c6cbbd1
Jadtre
46a25fc9d3f0d2628071d808a4aa1aed1c413b8e0bdbfaa364a18b76564b4336
Jadtre
55e05d48178c825c8d4c78f9a3d26a7c24c33f2908fb98e62122d1bc1f45cd40
Jadtre
87c97d12cf3a60d0d07469d7ee12e4895c7720c1648d48c67cc9c2d855a823b3
Jadtre
8cf1bcc2316a49a5f5566634e82ebb914bd9eb1a788464b2830c4f4072618de0
Jadtre
a61e451a8f87c93227f7a6f98204841f4ffd7b0dd57546d16946c364a5891e38
Jadtre
bd0d20f1fed0577f9ba9f8c82233ceb35f9c72038b84b43e9f6108b0ed732054
Jadtre
d44297d7b607f732588f8d1856102e44925d3dd63947b15e95a95d48492b5919
Jadtre
f11a90442789ee4260aa604a5499e0027af2e70f12e179f9b6425df3b4ad5fbb
Jadtre
+ 1'253 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
3689e80c25e9a4f90db62a86f8a2244d0d33075cf4c0e1bba3397a0dfad10692
MD5 hash:
1564202254df1f52456ee6c147e28769
SHA1 hash:
c52ac05a5f276b51d409c957c7826529ee12df5a
Link:
https://www.unpac.me/results/c84b5c2e-87e6-4e8d-9c40-faffab17d209/
SH256 hash:
4019da7184f546d0b0a34f197c3bb63bd5c58f9dcc5d9d2b62a5fe380d121e36
MD5 hash:
a3a0276a754d73b7d1c07dcf71b14acf
SHA1 hash:
7a5342efd0b1275604d3847e313efd77a244f09b
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/c84b5c2e-87e6-4e8d-9c40-faffab17d209/
SH256 hash:
2fbce10f899499c5321d774735f114733e75fc0b8bb9dcf635475cb14560314b
MD5 hash:
fe85ddd1ad560cdf5b6553ff45040e43
SHA1 hash:
2e94d294900034d2bc9d7c66c8e4ad037eca2d02
Link:
https://www.unpac.me/results/c84b5c2e-87e6-4e8d-9c40-faffab17d209/
SH256 hash:
1a053a0e15f42afb172652892e51ee3d3de25a5d741c7d46f9bd92c426132b85
MD5 hash:
9af628bfdce3a279c2c03fde852b1a97
SHA1 hash:
bca4709bfdfd4fd3185e92704414695b49d52cff
Link:
https://www.unpac.me/results/c84b5c2e-87e6-4e8d-9c40-faffab17d209/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments