MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6a2922edb458a5930b6cdd357c6e07b3820e913cfbc6e9d0ab9a767e803c4c02. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6a2922edb458a5930b6cdd357c6e07b3820e913cfbc6e9d0ab9a767e803c4c02
SHA3-384 hash: 24b1e0e7a6ab832d9a10ece2b57d0f768edbcdae2db1b9f47036d5c9c17edf75a50cd2bb523b28cab088fd628d1c0d86
SHA1 hash: 9c2f28b22226652e30a1e5bd3f874b7f95996091
MD5 hash: 9d1a51b5d168a4bbc07d7221a8d2c447
humanhash: green-cold-charlie-snake
File name:a945442835cc336f102f07c624451aa4
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 14:31:05 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:vd5u7mNGtyVfhSlQGPL4vzZq2o9W7GtxNut:vd5z/fwCGCq2iW7I
Threatray 1'333 similar samples on MalwareBazaar
TLSH 66C2D073CE8084FFC0CF3432208521CB9B175672656A6867A750981E7DBC9D0EA7A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/6a2922edb458a5930b6cdd357c6e07b3820e913cfbc6e9d0ab9a767e803c4c02/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 14:32:32 UTC
AV detection:
40 of 48 (83.33%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
3259f9119047fa8dc44b0ccd1493337df1285d7e83dae85d953d6561dc0a785e
Jadtre
500ebb98b692bd7643259032183ac9ca4685182053d742112fe2dcf497456e11
Jadtre
5116e2df8fbf9adf8b18c7222adadf4618ce17a0cb701632d9d4bf8bd52fc536
Jadtre
55e05d48178c825c8d4c78f9a3d26a7c24c33f2908fb98e62122d1bc1f45cd40
Jadtre
56ee8c549b4b84a57c6fb673e022e95f6d7f75e47150a9440a0e7633c66da14b
Jadtre
8468971fc5ca513fe01b3694532298984c3f499f5a6746d743f9e0ee93ce6bd4
Jadtre
86735084029e506116ca27918e0640689aefec9facb5f202c4d0918293166b1d
Jadtre
d4fba7a2bb5d02501a5df83e8f9e753ecfd093a851166ef817f8499fc6523783
Jadtre
da11ce101b6b1896a7116e05ea7dfc332d4cacbef739035bde57baee2223351c
Jadtre
ee1058c62329bab4fcb8938d857df47b126d7aa79360a6e96631ff9781f4e48d
Jadtre
+ 1'323 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
6a2922edb458a5930b6cdd357c6e07b3820e913cfbc6e9d0ab9a767e803c4c02
MD5 hash:
9d1a51b5d168a4bbc07d7221a8d2c447
SHA1 hash:
9c2f28b22226652e30a1e5bd3f874b7f95996091
Link:
https://www.unpac.me/results/3f03dbc9-c092-4243-aaf1-dd1ed65ceb24/
SH256 hash:
07b0ecc7df7cf15d4b112d323bc0db1cf224e1d3b1023a0e4a5129131826bd29
MD5 hash:
1f683ad41b54cf6e24202f64ec7d2110
SHA1 hash:
3847735f6269927b98aafef5b78581ee88be763c
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/3f03dbc9-c092-4243-aaf1-dd1ed65ceb24/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments