MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7af40b325720f1b1944a311d7736708bc47bc9755626d9ef978bfbeee69d4af1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7af40b325720f1b1944a311d7736708bc47bc9755626d9ef978bfbeee69d4af1
SHA3-384 hash: 2cc91d0ba2bc8c3ced91c4969a62d9390a324d4e19dab24d0fe1c4c629bc4c2e6a4f67d2473cac745e0af8fa46e051db
SHA1 hash: 5935cf8394aac4316757fa400aac8609c36429a1
MD5 hash: cb617496b9b4b12d3a70675b8dc6bb8a
humanhash: magnesium-fix-finch-sixteen
File name:b2be5270d7f1ae407fd51d0480627a09
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 15:03:50 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:2d5u7mNGtyVfhMysQGPL4vzZq2oZ7GTxl2mX:2d5z/fh9vGCq2w73
Threatray 1'191 similar samples on MalwareBazaar
TLSH 4AC2C072CE8080FFC0CB3432204521CB9B575A7295AA68A7A750981E7DBC9E0D976753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
57
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7af40b325720f1b1944a311d7736708bc47bc9755626d9ef978bfbeee69d4af1/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 15:15:58 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
157f768fd503eac6efc60300babf1b9651dd55e4c16187857be99fab55980a71
Jadtre
262d14df3839622faa76dd72c17de1dc76144b090163b37246634a4721819688
Jadtre
3730fee5301eb423fa8e1628b233221008914d03403b5ff22dc3f1b2e4f265ba
Jadtre
4627bedfc5629ab3f9022c93da40213f3bead519bf2069c1b5e0fa7b64299974
Jadtre
6232c6c0528348cadc0c8e965eff245f3221882c93d197919a911926b4d0af3c
Jadtre
8e12221ea523814573fc4461a4e30f623650a8fdaf859f63af68fd54d1880ef6
Jadtre
aa024d02db227bcaf25595bfac5bbec7b3682c4738f64d6d7beeed9d68f448d7
Jadtre
aa7fee8c381dd6198eeb219b481ff5d36c1cadadc0c4c3f6c813b2e457cd2499
Jadtre
c8bfdb7a96de32074db3f5eb953e434fc7538418e4d7630fcab022006f0d4f47
Jadtre
ee2a3f67bd38f3ac44b10f7b85bcb0a62055eba14080b05dfe70411dca532d9d
Jadtre
+ 1'181 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
7af40b325720f1b1944a311d7736708bc47bc9755626d9ef978bfbeee69d4af1
MD5 hash:
cb617496b9b4b12d3a70675b8dc6bb8a
SHA1 hash:
5935cf8394aac4316757fa400aac8609c36429a1
Link:
https://www.unpac.me/results/4d03bf9a-2f24-46f6-a3d6-6d8247c169da/
SH256 hash:
bba9633c9daa1479657b4d85d0c15501f6e2681c94efcd0f40ad160e98e5477a
MD5 hash:
313ceeefa396cc935dd6fab147470263
SHA1 hash:
e1b24aac80465b16cef4c20424eb489c62b05087
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/4d03bf9a-2f24-46f6-a3d6-6d8247c169da/
SH256 hash:
55e69feb583d62c17fa7af49f45e4219c7a6550efc72eba80b6d7dcdde95e2cf
MD5 hash:
458fa5c13b4eb0276b5a6830aa093152
SHA1 hash:
62a7ec6812786920e6a20454af1de7118a96d026
Link:
https://www.unpac.me/results/4d03bf9a-2f24-46f6-a3d6-6d8247c169da/
SH256 hash:
095daba3f464e7b723e4d744572bdb1d8a6aaa89f9a2f82555f1a3be70c2d412
MD5 hash:
7aa5d923d10c124360e90e6f990913a6
SHA1 hash:
e49068119e07da60bb93f6b2cc1ef1f4ee1a1a50
Link:
https://www.unpac.me/results/4d03bf9a-2f24-46f6-a3d6-6d8247c169da/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments