MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 559a72aa9c8dbd00a85004ef7542d874ea5cd9a559e9dd4577e31810ae5191f6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 559a72aa9c8dbd00a85004ef7542d874ea5cd9a559e9dd4577e31810ae5191f6
SHA3-384 hash: 59d1ae34db3c7d2dfaa762861bc913c6caa4659a14457b67be9081717e400262a26abe978a7c1f5bdbf2e8b55d3382b3
SHA1 hash: a00b4bc3111683b445c0dea0f0732eda707493d9
MD5 hash: 0b692ef00d61b5f32709761a9ae12683
humanhash: robin-mexico-twelve-alpha
File name:559a72aa9c8dbd00a85004ef7542d874ea5cd9a559e9dd4577e31810ae5191f6
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-14 18:03:44 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:Jd5u7mNGtyVflf8QGPL4vzZq2oZ7G8x0G9lr:Jd5z/flHGCq2w7R
Threatray 389 similar samples on MalwareBazaar
TLSH 26C2D0B2CE8080FFC0CF3472204521CBDB575672956A6867A710981E7DBCDD0DA7A757
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/559a72aa9c8dbd00a85004ef7542d874ea5cd9a559e9dd4577e31810ae5191f6/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-14 18:05:29 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
0546d43d99c02514969b3f387704b91a9b133d2dcd978f733959af595de38fbb
Jadtre
11ac0612988733c0050b678f0c266a7e12fe1a8c6d576ca76e6655b0fa003eaf
Jadtre
1904e2084523796c9f58265da38c243f804d9420d51214357451b5ecc7838706
Jadtre
25f84cb9a821f512bcf3da2fd3061e8a1cde67a77826e28103bd413ec855796c
Jadtre
6c1dd683d76e9d055b09fd3a1889029f7c942ee576fb4bbb9fead0ba5dd54b6d
Jadtre
727b1c826405359821e249f90725b78f429afef2063008f9fc00be7c4717021a
Jadtre
ae2eafce007526e2d7af3420dc737cc51ab95f7a4373dec8bfeb33a53bb07237
Jadtre
c4024ffaaccaafe6bd6e9735beed882373713cb0ec893712072547cba5ddcf75
Jadtre
dc48a839111ea75e49d03a2f863f9db9372b23808a56b66df8fed639e7431513
Jadtre
efd0487982a90b5d0f5099020d083219937ef2742625467918d6254c1646207f
Jadtre
+ 379 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Vflooder
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/559a72aa9c8dbd00a85004ef7542d874ea5cd9a559e9dd4577e31810ae5191f6

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments