MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4cda94ff75ef0f368cc84d9fb66c5fdc3c01d67754f6fc7377b8fc28ea5e5c96. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4cda94ff75ef0f368cc84d9fb66c5fdc3c01d67754f6fc7377b8fc28ea5e5c96
SHA3-384 hash: 8e63ec58fc35ce8e7b796dfb6aae4e70c783b8e1e9f7ab56d9f71defe6f30bca9c9a74d98605bee140b174878abdb7f0
SHA1 hash: 5911db979c6ad76aee43793fe764c416393acd43
MD5 hash: 43acbd0cef0a6865f688c281c6cd665a
humanhash: hot-south-pluto-ink
File name:ac62eaa164a842e9b80f5fcc5d4abb61
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 15:09:29 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:qd5u7mNGtyVfvxkQGPL4vzZq2o9W7GTx3+u:qd5z/fvtGCq2iW7I
Threatray 1'152 similar samples on MalwareBazaar
TLSH 92C2CF72CE8080FFC0CB3472204562CB9B535A72956A6867A710981E7DBC9E0DA7A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/4cda94ff75ef0f368cc84d9fb66c5fdc3c01d67754f6fc7377b8fc28ea5e5c96/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 15:20:30 UTC
AV detection:
28 of 29 (96.55%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
10e4ab1f6378d57c1d6bce76e374f3da6d921667723082d224b37392b399e29c
Jadtre
31e509c70eed9b6814b469acb46c25a8b96247f19cebfb686ba65e7211128515
Jadtre
3a1af3134f9c95b78f9a80391a7c7dbdb6ebb22d12a8b24bf71ade932b53ded0
Jadtre
47244def32829cff70e708ce99b13caf4a114c36a0136d82f4b8eac4c582e977
Jadtre
4837114457db4caaf44ee4076d5f46e68a28b0ba8a3f464f3135650fb58d3f49
Jadtre
6ea84f628a666ecea0a5ae8f1782be1259b6e1d4eef682f5281e3db3e1fd5911
Jadtre
95f5c5380297abfeb3eec3940a58fe84f93dc99c1d6909e56bd31b5ae4416721
Jadtre
d9e724a4244e4667f47837c2f99c570cc8d6aef561c5dbab4834318ead6e8adc
Jadtre
da11ce101b6b1896a7116e05ea7dfc332d4cacbef739035bde57baee2223351c
Jadtre
dee9d72aa424c3b03526551bf7348cfe32251911cddea70092e5ae2d6a13780d
Jadtre
+ 1'142 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
4cda94ff75ef0f368cc84d9fb66c5fdc3c01d67754f6fc7377b8fc28ea5e5c96
MD5 hash:
43acbd0cef0a6865f688c281c6cd665a
SHA1 hash:
5911db979c6ad76aee43793fe764c416393acd43
Link:
https://www.unpac.me/results/7e0304b2-6bb4-46b1-be8d-95cd5aa7efbf/
SH256 hash:
dccccb18b4105a7dc435d130f90fa51aca81c9b311bcaa67a85785eab0383e75
MD5 hash:
d3c74529bc07f3e4006d24c2d0666c47
SHA1 hash:
ec11ab38501e101471c608fd4f58e35f64058fb1
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/7e0304b2-6bb4-46b1-be8d-95cd5aa7efbf/
SH256 hash:
38e30b87f1d89ec475f80d5d7023a50d2c69fca8fa340b94b839c545aabf8436
MD5 hash:
6d079d7d816a87d7c72a2767ea416627
SHA1 hash:
3c2e1d68c4af511e472efe62575ff49488040d0c
Link:
https://www.unpac.me/results/7e0304b2-6bb4-46b1-be8d-95cd5aa7efbf/
SH256 hash:
306d06e07c77195708f27bd75576fe10699379fc47b0e1e57f874bb75e95f089
MD5 hash:
6a5b3cf30fb4f113fd99f1e606f05e7f
SHA1 hash:
75db412319dca3664687974b357a151eb20cfa63
Link:
https://www.unpac.me/results/7e0304b2-6bb4-46b1-be8d-95cd5aa7efbf/
SH256 hash:
8f2739aaed8ddd517bc79f6177bd26ed363d0225d9716e994a5ea3f8702975d7
MD5 hash:
2e9618c4a0a90b91326feb0c9a0f143a
SHA1 hash:
8edd368b011357b0b0c9a9c8df982e052fb2f260
Link:
https://www.unpac.me/results/7e0304b2-6bb4-46b1-be8d-95cd5aa7efbf/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments