MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 74b841117b329430bffd95e3ff41a230287f036e614e7255ce972622034298a2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments

SHA256 hash: 74b841117b329430bffd95e3ff41a230287f036e614e7255ce972622034298a2
SHA3-384 hash: fb064d056c4611f9772d39dc7c74c85fafc2ed0fafe239ac8195f1783d191f73fb8617b80c1ed156f47256a46d0322ff
SHA1 hash: 00427b67005dbab86d1324305bd6669a4176256d
MD5 hash: 53d900c5bcc81674ed70ff92d494e6b6
humanhash: kilo-blue-delta-chicken
File name:af7ad7adc263a4b9d01f61de429849b2
Download: download sample
Signature Jadtre
File size:27'136 bytes
First seen:2020-11-17 14:26:16 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:Od5u7mNGtyVfvxGQGPL4vzZq2oZ7GJxBnBi:Od5z/fvHGCq2w7g
Threatray 1'334 similar samples on MalwareBazaar
TLSH DFC2D073CE8081FFC0CB3432208512CB9B535A72556A68A7A750981E7DBCDE0EA77753
Reporter seifreed

Intelligence


File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Creating a file in the %temp% directory
Connection attempt to an infection source
Infecting executable files
Threat name:
Win32.Virus.Jadtre
Status:
Malicious
First seen:
2020-11-17 14:28:12 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Unpacked files
SH256 hash:
74b841117b329430bffd95e3ff41a230287f036e614e7255ce972622034298a2
MD5 hash:
53d900c5bcc81674ed70ff92d494e6b6
SHA1 hash:
00427b67005dbab86d1324305bd6669a4176256d
SH256 hash:
b8be86c99a40a32667f6c50c572b381ba08558d58b3e346f777df91e67413a65
MD5 hash:
83b7c257ef6fe7d825c9bd948a28d269
SHA1 hash:
f9f5052775b4322364f92dcfaab57c93872c02bd
Detections:
win_unidentified_045_g0 win_unidentified_045_auto
SH256 hash:
025f8f5d65b7f2fb798808cae74d9fc1286de791b1a9a23414df790be9038143
MD5 hash:
0e3e11db5e384215a85b43d167c30233
SHA1 hash:
741582862fdae18a4dea54eae4a9281f38e3b0de
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments