MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 aca2d8b8a440c37c89aa1302d1cfe172f8397c6cc37e09abd0cedf1ade150b65. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: aca2d8b8a440c37c89aa1302d1cfe172f8397c6cc37e09abd0cedf1ade150b65
SHA3-384 hash: eae24d80a56a77c2d8fb9c9ea0efeb482a02eb3be1d85c4e5e57957c8add69780bb4bd0bf04e050d9f761650766bcba5
SHA1 hash: 44a18f7348ab1ad14f8b4c30165b9dd43666e0fd
MD5 hash: 9305ced8b4e041414594cf4d98a4b125
humanhash: double-salami-solar-low
File name:aad716d6ce260b4d57777a68f482118b
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 14:04:14 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:9d5u7mNGtyVfdfqQGPL4vzZq2o9W7G6xI3X:9d5z/fVJGCq2iW7I
Threatray 535 similar samples on MalwareBazaar
TLSH C7C2C0B2CE8081FFC0CB3072204521CBAB575A72556A6867A750981E7DBCDE0EA7A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
52
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Sending a UDP request
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/aca2d8b8a440c37c89aa1302d1cfe172f8397c6cc37e09abd0cedf1ade150b65/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 14:05:10 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
0e3d649a0fa1f38f1d52d1bbd471c0222c4e3ba73dcbe60aa70fa5341c16208b
Jadtre
350419bf498342cd348f4d1bc5a3fa5a4873943340bfd495dec462a3fbfa10d8
Jadtre
568d92faac5589d26bae433d7cd2bd4c4630b79a68287cfe31cc002db1ee3a9c
Jadtre
608fbfd8ae7bef34ccfc9a8fc8040dfa521b24d023d517008b9a19d4e666ca9c
Jadtre
788d1a8ffb20f900399dc3f304155ef592a3cccb75741a65f41718fd5e70ae89
Jadtre
8f6393377ef56840de1a532ab8d9f1a0bde30c828c6efe90fdee9ce89aa638b4
Jadtre
943039f4b5fdd519cc3c22ebcdc894983350832fd3a6c79a34d98fcd05324031
Jadtre
9befbaf8eed943703a769aa791676e04857ba33263575779ffd023e02640459d
Jadtre
d3d766bf491609c808bf2ff4b16a061a93aefa3f96a6b85bdcbb99df7ed21fcc
Jadtre
d96c235d59988da354ebcf8ffa90ed6dec7fae3bb5685d45b6c5a09a295f57c7
Jadtre
+ 525 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
aca2d8b8a440c37c89aa1302d1cfe172f8397c6cc37e09abd0cedf1ade150b65
MD5 hash:
9305ced8b4e041414594cf4d98a4b125
SHA1 hash:
44a18f7348ab1ad14f8b4c30165b9dd43666e0fd
Link:
https://www.unpac.me/results/cd661be9-9b8a-4c52-b1d1-6581b097c1a6/
SH256 hash:
8dd481b75ac7c3d4de14db439baa931b73d7d6344c2525825fe070e626011668
MD5 hash:
06cd7c2c040a9103cbbeef5f4684a09b
SHA1 hash:
c546723bbc113f1667f359483f68c0a630c9e7b1
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/cd661be9-9b8a-4c52-b1d1-6581b097c1a6/
SH256 hash:
e96e1b5bed8bc2b9b10c7086bfa1ef200273d897f351a6f37bff484cdc87189b
MD5 hash:
cd8da1a8fd1fa0bef4dc74803f4d33be
SHA1 hash:
ebeea5a0ef4520e442d0fe20a9ae15a483aa749b
Link:
https://www.unpac.me/results/cd661be9-9b8a-4c52-b1d1-6581b097c1a6/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments