MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a8d76fc8b8a9b94013af9508c99972859a8fe68f3797b70bc262e14ce98df11e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a8d76fc8b8a9b94013af9508c99972859a8fe68f3797b70bc262e14ce98df11e
SHA3-384 hash: 4da3b2226d6e573bfd3d834c36071fc60a50979f4ea02fa551cdd066473b616d74a14b27698a59bc7b8a05107b78230e
SHA1 hash: 253279f47c132d688f30964efa4ebcd1503eb664
MD5 hash: 02b311b388e10d9106e49cc8c6527495
humanhash: december-massachusetts-hydrogen-massachusetts
File name:b188dc5b0f34bc5db8970739cb432686
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 14:49:46 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:Sd5u7mNGtyVfjihfQGPL4vzZq2oZ7GTx09k:Sd5z/fj04GCq2w7H
Threatray 1'264 similar samples on MalwareBazaar
TLSH F5C2D072CE8080FFC0CB3472208521CB9B579A72A56A6867A750D81E7DBCDD0EE76753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
57
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a8d76fc8b8a9b94013af9508c99972859a8fe68f3797b70bc262e14ce98df11e/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 14:51:43 UTC
AV detection:
28 of 29 (96.55%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
1ae2e93239452a630a8b1df5d35fd3772f9da91593772dc10ebb0986b689e409
Jadtre
464a7aa1acbb02bef82dfe4d0ed75f3bc2abb523448acd0cb23cccd568d9df37
Jadtre
6d030a4dfeccb675ab51e55021a4c9e3950d3c1aa6a5728e35411674483dd64b
Jadtre
7e09cf09d72b11e02d74ad3cbc6d10641763e52de83514d6cc2c131dc8f39903
Jadtre
801ba406202d05090ab8b83c8216dd4bf22127c50d39f6c8e8ac69cc15de439c
Jadtre
804dde58419f81247533b3f8f7ecfbb1856f5a4cc406fad0561c55884850671b
Jadtre
91b6eed2e4296de2c8aef432b5961ab05cde24ba102c1a4f298c99d40cac09fb
Jadtre
9e4f0b4e3a381af610d6d1ed24d5d26126eb2d35113b7dd67705bcf7ed854bb1
Jadtre
9fa7fa8fed274a68915cc36cce6ccff8d82428b59f7eac051754db4da93baac1
Jadtre
e1c420637e2e628df9faa878291872f1e3aea89a7d1f88634dd766fb25220f4b
Jadtre
+ 1'254 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
a8d76fc8b8a9b94013af9508c99972859a8fe68f3797b70bc262e14ce98df11e
MD5 hash:
02b311b388e10d9106e49cc8c6527495
SHA1 hash:
253279f47c132d688f30964efa4ebcd1503eb664
Link:
https://www.unpac.me/results/b3c8ab09-8d99-48fd-9682-60014f9ae207/
SH256 hash:
06e5e403b5d31154c2f3bab9dfe002c7271e0a7c192434417b2247e42b6d5a63
MD5 hash:
39362e5ca54062de916b5fb40e5c19a2
SHA1 hash:
e49d1ec87318c9229a106952dfa642027cf64a7f
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/b3c8ab09-8d99-48fd-9682-60014f9ae207/
SH256 hash:
da0182e26f403354534ae0f5864b4c7507d1277c0356e63559dab9492476f762
MD5 hash:
39fe62d7547e0553f3cd490e2b9e7934
SHA1 hash:
d85689003e820cad3d6977900abdb1847641955a
Link:
https://www.unpac.me/results/b3c8ab09-8d99-48fd-9682-60014f9ae207/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments