MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 45a687a1e0f47e4365fa4b9a8395a1c507dfdbe450ce846f3b8b491b60a83a3c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 45a687a1e0f47e4365fa4b9a8395a1c507dfdbe450ce846f3b8b491b60a83a3c
SHA3-384 hash: aca0808988c9abf59d64a14c7c9dc8f4d9a734be4f48a91ca91e579e0432317bdc0fa68101ccea7b72124a24bc249abe
SHA1 hash: f460de6d804ba76eaa030ac09950ae9b51163ad6
MD5 hash: 212f7f7fae27d65d4704c2ee430a02ef
humanhash: vermont-eighteen-montana-connecticut
File name:af3a60e7400a168b49a93ca29a68c374
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 15:00:14 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:bd5u7mNGtyVfXalQGPL4vzZq2oZ7Gcx8USJ:bd5z/fKCGCq2w7b
Threatray 1'204 similar samples on MalwareBazaar
TLSH 81C2D073CE8084FFC0CB3472204522C79B575A72A56A6467A710981E7DBCDE0EA77753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
61
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Modifying an executable file
Creating a file
Connection attempt
Sending an HTTP POST request
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/45a687a1e0f47e4365fa4b9a8395a1c507dfdbe450ce846f3b8b491b60a83a3c/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 15:14:15 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
124e2a5c148fc786dc09802d3be33c2ea3e48b418abd3dee84ea9e7f2dbd924a
Jadtre
1492be1ab88cf7ccf434e39ff3569cc43cab49b2cb848ec9d70aa26711a99def
Jadtre
2c377bf1d740e0be9e6ad0c3823eaae4b17364d59dd840f1eeb065f80dde13f0
Jadtre
444195a15805f146324293d6513b220957c14a9c3fbc5b2e2fc14d9c1f1d6488
Jadtre
56ee8c549b4b84a57c6fb673e022e95f6d7f75e47150a9440a0e7633c66da14b
Jadtre
58bf28cfff7576c256e6e01baed382c013f146a7348680ff813124bdb58873e2
Jadtre
7e09cf09d72b11e02d74ad3cbc6d10641763e52de83514d6cc2c131dc8f39903
Jadtre
80b4783d87c5461e2e3486d15ecef302da7563408fd7a3b05284c75f13d06e92
Jadtre
83915362c49ea4328f063fb2d82ef34806046354448c2f0a2d3a2c66b0246aef
Jadtre
aee8feed5a523621e799afe7074f75a3f99568fdabc2d3fee42c5dc2c9ac474a
Jadtre
+ 1'194 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
45a687a1e0f47e4365fa4b9a8395a1c507dfdbe450ce846f3b8b491b60a83a3c
MD5 hash:
212f7f7fae27d65d4704c2ee430a02ef
SHA1 hash:
f460de6d804ba76eaa030ac09950ae9b51163ad6
Link:
https://www.unpac.me/results/9bebdae5-0647-4957-ba1d-6ebbbb1ab7e5/
SH256 hash:
ad3fe731f47cf47ae3eda019a6a2d650631ffeaa92fc00bd64a40ac474e11420
MD5 hash:
c4cfd723e724807154d534fe5e9c4cd1
SHA1 hash:
b3bb42d49395525343d432ab0b0ba1105e9173a0
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/9bebdae5-0647-4957-ba1d-6ebbbb1ab7e5/
SH256 hash:
25a88628babbfcf0b1a279b6c2a45a78a8cd110b4c690d72e304ae171578e541
MD5 hash:
3620ff930697e30a7727b72283841081
SHA1 hash:
7208359a53276c4f97adf30fcf75c2895bd41952
Link:
https://www.unpac.me/results/9bebdae5-0647-4957-ba1d-6ebbbb1ab7e5/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/45a687a1e0f47e4365fa4b9a8395a1c507dfdbe450ce846f3b8b491b60a83a3c

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments