MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8f45c131a15b2e91af4dc3adcd6583ec99310ef96f8713e151e23157467953a6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8f45c131a15b2e91af4dc3adcd6583ec99310ef96f8713e151e23157467953a6
SHA3-384 hash: a30482791a7e17463517f4e75f777bf39e9393826c025d75ea9478f4720e1d92aee2967fb94c0386ac247da9fbb5514d
SHA1 hash: c2a68f859a8cb88201e993e12fbac3809bd58552
MD5 hash: 70ba3826df8a18af6bfef145c4ab3c94
humanhash: magazine-football-finch-carbon
File name:abe958bd80e94e41abe9ee8afb79fd6b
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 14:03:20 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:8d5u7mNGtyVfFEQGPL4vzZq2o9W7GTxsvC:8d5z/fRGCq2iW7v
Threatray 544 similar samples on MalwareBazaar
TLSH B9C2D073CE8080FFC0CB3472204512DB9B535A72A56A7867A710981E7DBCDE0DA7A763
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
53
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Sending a UDP request
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8f45c131a15b2e91af4dc3adcd6583ec99310ef96f8713e151e23157467953a6/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 14:04:18 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
1535144d6528c2b1e4431bfe961b943ec7fee817fa0ccbdfe16cc4e6ffcb39e2
Jadtre
1b7cb0cf5117d8663c4177b9e5d5c964a1e7805b5f4ab130f3daafdc17e2a471
Jadtre
21bad98389f9f23afb765337378ad0deb9cb76b822a4af389d15aab7edfc85b4
Jadtre
2367638c85441932cd9a1eecc90f6db90f0f64c10a8657479d86b088cd789c21
Jadtre
5ec1a05ff93c47f03aad00588ebdc6bb036cce9dad723ec7cc00d3a61f0454e5
Jadtre
6215cc698e96a7cf6704213ad9a72382a15748fd8c4b6836797cc16c88d5b7a9
Jadtre
867aa0053cd84c4d3bd1c37228edee7dd2adaf996d62458fab4b7e5c5f8785d5
Jadtre
ca40f4cb3afb5fac8d912fa2eb84dc6735e15ea154257446e8ea08cc547e0a9b
Jadtre
d2041ee43afdc99231aa5e808dbd040572718ff392413a3f6938ffd6fba204b8
Jadtre
f80aff76e95ac9c39e0eec2ae013c9ca64d7e6eda36ce1843980640a94ee2322
Jadtre
+ 534 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
8f45c131a15b2e91af4dc3adcd6583ec99310ef96f8713e151e23157467953a6
MD5 hash:
70ba3826df8a18af6bfef145c4ab3c94
SHA1 hash:
c2a68f859a8cb88201e993e12fbac3809bd58552
Link:
https://www.unpac.me/results/6843a54f-5efd-47db-a8c5-1f5cf5d101d6/
SH256 hash:
12474080dfdbc5973d4eb4fdb2044d66d9bff6ab459e7d0a3cf3b48ae53ffec3
MD5 hash:
6f85454e443192dc6a8733956b307d98
SHA1 hash:
91ae0350fcc1ed879c22dc5694975f6c0e1c3845
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/6843a54f-5efd-47db-a8c5-1f5cf5d101d6/
SH256 hash:
d7669f0de4425f9ea17a2856c992997e3e0ae61785b8623933d77dc7ec13ee3f
MD5 hash:
de95f51e80557ab25f4550dab46e5a59
SHA1 hash:
75ccddeb1b0529f6f9970f4943d8ee3cbb077bfa
Link:
https://www.unpac.me/results/6843a54f-5efd-47db-a8c5-1f5cf5d101d6/
SH256 hash:
ebdf3ca37e0c7d79eb5c4bdaa652729c429ae1c83dcc93fc056cd51b64a4b9dc
MD5 hash:
a96bb26f1d07cee762907e2cfdfd78ed
SHA1 hash:
cbfe316bd533ffee50bba2c6cbbc8338594c5c18
Link:
https://www.unpac.me/results/6843a54f-5efd-47db-a8c5-1f5cf5d101d6/
SH256 hash:
12d241254e9a95c15918ced9a24f0dffde9fc5cd21428ab6792473f98d34c065
MD5 hash:
b81e8c6f963f3d104daa5968885cd9f5
SHA1 hash:
ec86f5f60a4221324e64d5fe479f48caf6b6e87b
Link:
https://www.unpac.me/results/6843a54f-5efd-47db-a8c5-1f5cf5d101d6/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments