MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 55b0b969a68dedc1ba6e68ce771062aeaca49ad9e702c5a935583dff0b783244. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 55b0b969a68dedc1ba6e68ce771062aeaca49ad9e702c5a935583dff0b783244
SHA3-384 hash: 6ddeb5daa289203340be850230599fa56aab487d87fc29c791b2739d93133837e4bb89adf1d2060ec3ed927c51e76797
SHA1 hash: 31c557868033cd7366e1fe327fd52a466037aff5
MD5 hash: 307ad6e1e9a539b999ded29df1055b1d
humanhash: delta-tango-seven-oxygen
File name:af72e305a76f1ca987caf5d0cffe0630
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 14:11:56 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:hd5u7mNGtyVflISQGPL4vzZq2o9W7GTxHrAv:hd5z/flMGCq2iW74
Threatray 1'348 similar samples on MalwareBazaar
TLSH EEC2D0B2CE8080FFC0CB3432204512CBDB575A72556A6867A750981E7DBCDE0DA7A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
57
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/55b0b969a68dedc1ba6e68ce771062aeaca49ad9e702c5a935583dff0b783244/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 14:13:33 UTC
AV detection:
28 of 29 (96.55%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
25004ed41acdb8226a9fdb862daf347fa18acfdaddcc26241e35fbc1065be106
Jadtre
2db6fa1b2ec2f8c6f75a897cd10beade91842b672b8840e44235bda1d84cda7f
Jadtre
38cc91ff2e002e661c069f370bdf067b527d5c18895be976308a7a9c646267bb
Jadtre
76c4139cd4c96978dff5d46df5567cc0d5832e0617dbd01695c337a49b1b19b0
Jadtre
8554e471a472d7b9ed789cd954e5a74d97b4820b7ff1e800e132576a8126d6ba
Jadtre
ab83d6496d13f4d66d02585764452cdba3bdb435ff656b2bea56e92b841ac29f
Jadtre
b0b5f6c6edcfbce7bc1b2703b2d694099b1b6c610f8cc868de49e34088ee288c
Jadtre
bdfc09d27698aed344618056778e41371eb52090715613c167bde99828bd3972
Jadtre
c00f831588b22d2d8c1da315252a46a52b9a1251b0a532008237f39c89b57b0d
Jadtre
fee5041b8b2be64b4a223479773c5bcc214fc19dbc4e1c1b77b79dad05482ad3
Jadtre
+ 1'338 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
55b0b969a68dedc1ba6e68ce771062aeaca49ad9e702c5a935583dff0b783244
MD5 hash:
307ad6e1e9a539b999ded29df1055b1d
SHA1 hash:
31c557868033cd7366e1fe327fd52a466037aff5
Link:
https://www.unpac.me/results/78085a53-5bbf-4ad6-b66d-75bdc45a223e/
SH256 hash:
c8aa1eaaf6a0911fd709f2ecd830a8e7bb09dca13d23f1b720ca3bd9733bfbd7
MD5 hash:
69445eba99e9e4e9c2192e5c20801bbc
SHA1 hash:
fb7d985836b3ecdf88a40caf2712e6bb7c8b1104
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/78085a53-5bbf-4ad6-b66d-75bdc45a223e/
SH256 hash:
266052d8e978f87a13075ddc83c0f591b684a677c229dcc59c3e58d28d3c3a7f
MD5 hash:
cfc3815dd08e64ab5ab3cd1a60dd8ba2
SHA1 hash:
9a9fde0fda5e7c58b816ed4a59e128d7c23e74b4
Link:
https://www.unpac.me/results/78085a53-5bbf-4ad6-b66d-75bdc45a223e/
SH256 hash:
f068677d85900bbdd5ff7e1ec931e20df089d6edc7b9c5944caf351e18736863
MD5 hash:
ad986194b84de5bb975d78457b7ae14c
SHA1 hash:
e7fde0deecdfa044ad4ec6f678572a3bc64e9c45
Link:
https://www.unpac.me/results/78085a53-5bbf-4ad6-b66d-75bdc45a223e/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/55b0b969a68dedc1ba6e68ce771062aeaca49ad9e702c5a935583dff0b783244

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments