MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 aa464d7c35549d95a9974ae0c12ac991da4f6a20296f0a2fab84c03edb8cae66. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: aa464d7c35549d95a9974ae0c12ac991da4f6a20296f0a2fab84c03edb8cae66
SHA3-384 hash: 106b33063c9368bd3f16f88d81fcaa3e0f96626fba45a5fd9096c3f6170156c790a24eede91b3f141cf672a385dcff7a
SHA1 hash: 3f92b9e2a0132a5294b50ac6639afcb90bfc5cf8
MD5 hash: cdfdd23f446ef8ba24e33c1ebe4512cd
humanhash: purple-coffee-romeo-foxtrot
File name:af22353c8f135f46a8c269176e4f50d1
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 15:25:07 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:vd5u7mNGtyVfYqsQGPL4vzZq2oZ7GTxnAk+:vd5z/fBvGCq2w7X
Threatray 1'573 similar samples on MalwareBazaar
TLSH 1BC2D073CE8081FFC0CB3432204522CBDB575A7255AA7867A710981E7DBC9E0EA7A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/aa464d7c35549d95a9974ae0c12ac991da4f6a20296f0a2fab84c03edb8cae66/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 15:30:42 UTC
AV detection:
46 of 48 (95.83%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
24c1fc99e66f28e27ff386a6834bf4a7100e44fb2a409be8676af8dc1ec71b3a
Jadtre
33225d97c2a95d57cc21d9b15204fae17fc4ea170e35203a9593adbc2798dcbd
Jadtre
35150ddf11e9eb39b53ab65d94190aa1a67a29b90136b71cb778b6de99c34ea7
Jadtre
3aeb6053d169ae15647a49432d2cb8282d09059a916ffaae93252258ecb6307e
Jadtre
3c4c8fdda37010277359be7d34620f97ac7485270c73568471603913097ffb96
Jadtre
3f39d0f7cbd21f86618bc52ebbe392717baf6a017b4b275307f22e2d65e8fb9b
Jadtre
687979517aa0881fecb5bbde298b2ae32acdce53d28f4983fc0a35bd791c8b93
Jadtre
e694db69130c82d511cdb36ff20acee99af654d728f1b30c996d3b2a21971fd1
Jadtre
eb78ea7826a95a55df1468253dc2fa4f1689db028acfa9aecbaa3bf55362993c
Jadtre
f8e94435bbcdf64f42dadb9ffb299d6c90baa6ed39f3b8b3452e94730356e481
Jadtre
+ 1'563 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
aa464d7c35549d95a9974ae0c12ac991da4f6a20296f0a2fab84c03edb8cae66
MD5 hash:
cdfdd23f446ef8ba24e33c1ebe4512cd
SHA1 hash:
3f92b9e2a0132a5294b50ac6639afcb90bfc5cf8
Link:
https://www.unpac.me/results/0e1bef3f-2176-44d0-ba11-00aba8bf5212/
SH256 hash:
72b6e5500c2bf8655dae6d711aa8935aa7cb196064d16886fc416a98c88166f4
MD5 hash:
17a7ce7e9a5f4a2860addfbee99fc5ee
SHA1 hash:
36471c2a839e9d89bfc3d4a77e764802fa5da44c
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/0e1bef3f-2176-44d0-ba11-00aba8bf5212/
SH256 hash:
f65cf80375a2965d5701f0d9305eef6c5756b81812d258f144886eda981569a2
MD5 hash:
cc1779b6530c2a90584fa5fa99a66473
SHA1 hash:
48776a1a673688c6f127aa55a55e9cc47fd03075
Link:
https://www.unpac.me/results/0e1bef3f-2176-44d0-ba11-00aba8bf5212/
SH256 hash:
fbb0e238dde3a219391292db124358acf64264432df2c1d0032b3a3b50eba466
MD5 hash:
04d7e0906598451b1c1f2a4e2348fc5e
SHA1 hash:
ff2acba54ce294be346fedc41e4d9b901a71a27f
Link:
https://www.unpac.me/results/0e1bef3f-2176-44d0-ba11-00aba8bf5212/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments