MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 66c78fad96727d1838c529dec69d18acc6ae0671720dbcc74d004f8e7c7e8cc1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 66c78fad96727d1838c529dec69d18acc6ae0671720dbcc74d004f8e7c7e8cc1
SHA3-384 hash: 37dc1582b9b988b96fed109df9eb0e1eabe780b5bb0d3579f95a3b2e848d14012c7440237aadd2a0860abecf9c09679c
SHA1 hash: 2b76745df20810f78f2e43896a13cbdcdbf2c5ed
MD5 hash: c337df118e650caefb8a8e6b3e533ae7
humanhash: alanine-uncle-bulldog-seventeen
File name:abf968293060fb64b4a5e1152f6294a4
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 14:12:56 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:Md5u7mNGtyVfWzsQGPL4vzZq2oZ7GcxB3Bb:Md5z/favGCq2w77
Threatray 1'346 similar samples on MalwareBazaar
TLSH 79C2D073CE8090FFC0CB3072208521CB9B575A72556A7867A750980E7DBCDE0E97AB53
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
56
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/66c78fad96727d1838c529dec69d18acc6ae0671720dbcc74d004f8e7c7e8cc1/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 14:13:48 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
0f80a786d304cfcd8dc4b05a344c1aee9ebea73201bf4007974b79f796f8133a
Jadtre
11f6ffbf034ee9e2115222e2f2f1e53da05f25678d352e4122277053ba0a4822
Jadtre
45c3b0c727223b5d80176fae1c3c080be3607c47a7df116f3d336523f2035a0d
Jadtre
5b866188ac6f031d8cc04d3037fa1fed4de96337db0d37c88bc47bb487165f6b
Jadtre
86051d318ae659f8265007a96ca0e5951cda1a8981399e524bb44397465e40ab
Jadtre
8d5524c989ea7f2055c11e03e720ba71ec7ea91eb425be398f1167b144529e7c
Jadtre
918e53388057ea0c8ab96c4e23ec2b713162f4ea66f449d5c49cf50e96eb4a5d
Jadtre
a5d43f533dbada800505a8bc087280e2b278bdedb0b0ea0ec49f89dabb6c4ac6
Jadtre
f2753aa54195e9496f7a38d53c4225b5d27722a148eaf0ad88c0fbb5a386ec8a
Jadtre
fc3a2fe3ac9f9cbbbb460802dd8670e31df3642ff7808c1ce7e5f935b9a23486
Jadtre
+ 1'336 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
66c78fad96727d1838c529dec69d18acc6ae0671720dbcc74d004f8e7c7e8cc1
MD5 hash:
c337df118e650caefb8a8e6b3e533ae7
SHA1 hash:
2b76745df20810f78f2e43896a13cbdcdbf2c5ed
Link:
https://www.unpac.me/results/605fcfc9-4a45-459a-8ce6-1cc49a28db35/
SH256 hash:
d2523cbfc5b0509619aeabc65394b6f623fd332862a5616a4e3358a8a241a70b
MD5 hash:
340356c9d5a73cd8d10afe93f73c17b1
SHA1 hash:
c1c1c204beb9c00c907cc3d51c4aa287f7d26eeb
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/605fcfc9-4a45-459a-8ce6-1cc49a28db35/
SH256 hash:
b0ffc3940d37fb38af410504464fd9ceb1473d8fc78ae685c21cf3264c0e7613
MD5 hash:
13c02366a9880018a0902a6e78c925be
SHA1 hash:
cebe6c9aa28796b867623811b101d6a88578b0be
Link:
https://www.unpac.me/results/605fcfc9-4a45-459a-8ce6-1cc49a28db35/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/66c78fad96727d1838c529dec69d18acc6ae0671720dbcc74d004f8e7c7e8cc1

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments