MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4ff272312f3ff3f5762f2c21e560e8c7ba693bb74db241ee4b17cdc609b87aca. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4ff272312f3ff3f5762f2c21e560e8c7ba693bb74db241ee4b17cdc609b87aca
SHA3-384 hash: 1a2cd8d59c95772b30ff43aab049c88003a95c8ba5744788e6afdef43e5628f0d895fc20b55280e38e18e89e4990a097
SHA1 hash: 1398dda533e8ad2c0f6ce462a75ba203b8a9ffe5
MD5 hash: 7c21a61e338c897bd143b5e7835fddd1
humanhash: uranus-zebra-avocado-green
File name:b1157bf3989322aff44de97d9b2351d9
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 14:09:57 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:ld5u7mNGtyVfhbLqQGPL4vzZq2o9W7G8x8V7:ld5z/fhHJGCq2iW7C
Threatray 1'360 similar samples on MalwareBazaar
TLSH B5C2D072CE8081FFC0CB3432204562DBAB535A72956A7467A710D81E7DBCDD0DA7A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
54
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/4ff272312f3ff3f5762f2c21e560e8c7ba693bb74db241ee4b17cdc609b87aca/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 14:11:33 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
0414c16d40c5e3d08df54347263ce1587738a715aedf056571db7f236b8cb6b4
Jadtre
0546d43d99c02514969b3f387704b91a9b133d2dcd978f733959af595de38fbb
Jadtre
08a31969110b67ca172f37a6cddaa7811e1d78ab6bef6ce9298c83af54733962
Jadtre
0ef19448e3a653fd27717a4fadd897fcbd54d13c24d2be0e807a13abf58ca186
Jadtre
1ab49770046c934ee87d397093742959c1ffe397c8d460226108014f54649cf6
Jadtre
2e98a26c658ade931bd596c15eff4dfb8c55c77e3dc62a2e1fd63639912a82d5
Jadtre
33b5db08a2cdb585fefe6a9cef4b091a7268a5165192b72000d67c2d3e80ba21
Jadtre
3f1eec46766f917b90028df58ad0660e9a344d2c74bd17bc905e75562e0fc12e
Jadtre
a2322ed089927d8bf2cd8b008e4321f375fbb7023fa61d07eff7cc3bc4f7edf3
Jadtre
d3cf2a7923049099d4eafffd6721406a74829cec0276ec07dd98af09ab6e7648
Jadtre
+ 1'350 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
4ff272312f3ff3f5762f2c21e560e8c7ba693bb74db241ee4b17cdc609b87aca
MD5 hash:
7c21a61e338c897bd143b5e7835fddd1
SHA1 hash:
1398dda533e8ad2c0f6ce462a75ba203b8a9ffe5
Link:
https://www.unpac.me/results/01c746a7-81c1-49e3-8e3e-be78df704db8/
SH256 hash:
b5a071fe702a1f15b1273f179fa744b0871a553d03430ba8140906250d65239f
MD5 hash:
e331f6de51888acbb4dd5be5833626f4
SHA1 hash:
8b5c0f6fb2435c3f9d5d36f19cbce2a01c7a26e5
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/01c746a7-81c1-49e3-8e3e-be78df704db8/
SH256 hash:
194d0b83ed11ce899507413a32179ea894e6141483b659e378af2f8d045430ce
MD5 hash:
610783fea4bac8e9880ce8552e597553
SHA1 hash:
05c0f85c87c4c80bb2450c1462cc7f4bf2ac08ad
Link:
https://www.unpac.me/results/01c746a7-81c1-49e3-8e3e-be78df704db8/
SH256 hash:
93d2fc64a6ccececf390b6e948deadc50d197b1949683c0a09ac6a01de90307d
MD5 hash:
1f2dd0af66590a80ce4a3ddafffb4a02
SHA1 hash:
af53bde538e2766959328e89142b7b41791cf39a
Link:
https://www.unpac.me/results/01c746a7-81c1-49e3-8e3e-be78df704db8/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments