MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5af92a80ba5deaffaee10acaa17ae5e2693dbc96124952485e4c3c43c3d5deef. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5af92a80ba5deaffaee10acaa17ae5e2693dbc96124952485e4c3c43c3d5deef
SHA3-384 hash: bf3376f5338a1c509f9479eefe2f9461455ac0c14b567e627e97c097a1d86a536339b24feb81a68a4a71a742d5953332
SHA1 hash: 1573a0d38a65a21b2254f040baed43352590d258
MD5 hash: f9c8de89973ad8cd34ac527f4ee47f45
humanhash: xray-georgia-enemy-florida
File name:ad68064eaffa6cf834ee18c2a0d2b8dd
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 14:03:04 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:gd5u7mNGtyVfH9QGPL4vzZq2oZ7G8x2sBX:gd5z/fqGCq2w75
Threatray 1'388 similar samples on MalwareBazaar
TLSH C2C2D0B2CE8084FFC0CB3432204521DB9B575A7255AA78A7A750881E7DBCDD0DA7B753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
51
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Sending a UDP request
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/5af92a80ba5deaffaee10acaa17ae5e2693dbc96124952485e4c3c43c3d5deef/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 14:04:08 UTC
AV detection:
28 of 29 (96.55%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
039216db9c152f103515295c0a2dd4eecc9b24abc43a1bb1adca123738c21c3c
Jadtre
342f3b974da2403da33e7e1099eadffc00cb2c8b67513c77f51961703b28563b
Jadtre
57c8f45380c88265809d43b2df1089ab41fb406f72b166268bda41c1db83f8c0
Jadtre
6e0b11d8d429c890fc09ef9095855137091d3e8b6cb0e1ff034fccd87d05c49f
Jadtre
72b62d5c72d7f2a6326709627dc7447b58eb4cc88401bdaf81f26f0664ee8b2c
Jadtre
87166e2e9a50ee4e945718788e016556d6c2ee62956c3c5b991e56873decbbf9
Jadtre
a401ae6c45994cfaa945fa0ae85e5fb7649005e6d95f12736b452596697253e1
Jadtre
a9def221e48ca9848f02d50e895f448dd9ec8efb96a47c7e9dec47fb803867c7
Jadtre
ad5437b56430713164ca8d03004af29bf2cc0226efb3b10c530bdc0cc5984e83
Jadtre
e74d4948d15885cfa5e10b5b7fe206ced094ce89ade2bc0acf77aac5207c2389
Jadtre
+ 1'378 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
5af92a80ba5deaffaee10acaa17ae5e2693dbc96124952485e4c3c43c3d5deef
MD5 hash:
f9c8de89973ad8cd34ac527f4ee47f45
SHA1 hash:
1573a0d38a65a21b2254f040baed43352590d258
Link:
https://www.unpac.me/results/dbcb0b07-11eb-4104-b4a1-241c3f683efe/
SH256 hash:
e35d387b4be348ba0ea9a87072bbb7595ebed48a2d62858492bbc415ddf6343b
MD5 hash:
c252b8241611d33d75da5561b7995564
SHA1 hash:
a9908ea211aaf0e5bcdc649f24bfe4a00ab2f474
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/dbcb0b07-11eb-4104-b4a1-241c3f683efe/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments