MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 38cc91ff2e002e661c069f370bdf067b527d5c18895be976308a7a9c646267bb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 38cc91ff2e002e661c069f370bdf067b527d5c18895be976308a7a9c646267bb
SHA3-384 hash: f81acf9bf4ab87c095c1570bc8aa8f09a4804be6282eb3587e5e5b353136f83165a1d1454354ce60d0f187d75e8dfe6c
SHA1 hash: 91e4f2618d912f2bf1f1d30611a8fc7c1a6162ec
MD5 hash: 7fc965307f88c073aa01e9d99fd7873c
humanhash: yankee-bulldog-chicken-massachusetts
File name:38cc91ff2e002e661c069f370bdf067b527d5c18895be976308a7a9c646267bb
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-15 22:38:11 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:6d5u7mNGtyVfhyVQGPL4vzZq2oZ7Gsxv4Pq:6d5z/fhdGCq2w7q
Threatray 397 similar samples on MalwareBazaar
TLSH 84C2C072CE8081FFC0CB3432208522DB9B575A72556A7867A710981E7DBCDE0E97A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
54
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/38cc91ff2e002e661c069f370bdf067b527d5c18895be976308a7a9c646267bb/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-15 22:40:10 UTC
AV detection:
45 of 47 (95.74%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
25f84cb9a821f512bcf3da2fd3061e8a1cde67a77826e28103bd413ec855796c
Jadtre
296b7c2b249792d26162d37cd6319fdadffc0d71a8f1b47356dbf9a375ba4abf
Jadtre
727b1c826405359821e249f90725b78f429afef2063008f9fc00be7c4717021a
Jadtre
89066dc60892fce61e797a2a7dc47e6ab6b4105f70335728a717dd7878e3650b
Jadtre
b27c8185905a35d2d3cf51f9787fb60f5b66418f1945bec2e9984e665ca7a301
Jadtre
bbd23c878d128b681402d6e03e200c563684746d3e4097637c974145bc8c57d7
Jadtre
c1846a5f77b09f059b009ea76004fe57a2cc66bb25e5c744a5fad7513b28095a
Jadtre
e417f801b98fafb1e63ccb527d37c8e39507a672517554d13c9c97c3ade9a9b4
Jadtre
e90bafed7c26fb1eea13b0be4eb5a0976ca7e551c76f837832a22b5f56a41142
Jadtre
efd0487982a90b5d0f5099020d083219937ef2742625467918d6254c1646207f
Jadtre
+ 387 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/38cc91ff2e002e661c069f370bdf067b527d5c18895be976308a7a9c646267bb

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments