MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b2df94ca6a6cf89b87c3e107be00f17ba0c2663c6c6e72192554a73e8dced39f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b2df94ca6a6cf89b87c3e107be00f17ba0c2663c6c6e72192554a73e8dced39f
SHA3-384 hash: e6b35c2f44e74df158f6dbc11e79198cf56c236aa06f81ea84bd23acdbeb9a3312e7cb180cd3cc2df3e7c6f0738f31ff
SHA1 hash: 6824c682cd02415915ebd3701a065ca9eca2dc68
MD5 hash: affe1429efa473877b5cd150643fdb25
humanhash: green-music-fruit-uniform
File name:b2603eefa279fce0f59a22c84e1ca2ea
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 15:30:25 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:td5u7mNGtyVfbalQGPL4vzZq2o9W7GTxbUQls:td5z/fmCGCq2iW70
Threatray 1'581 similar samples on MalwareBazaar
TLSH F8C2D072CE8080FFC0CB3472208511DB9B575A72657A6867E710981E7DBCDE0EA7AB53
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
61
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Sending a UDP request
Connection attempt to an infection source
Infecting executable files
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b2df94ca6a6cf89b87c3e107be00f17ba0c2663c6c6e72192554a73e8dced39f/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 15:37:12 UTC
AV detection:
27 of 28 (96.43%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
13048505f556d6ea56269b68d126582245a8bfe9e7d06c932b9570c4a0ef5276
Jadtre
20874eb1bcf4ef2b37425ebdd517ce733feed63ea856d82901df7ff994a10d13
Jadtre
2e35c7a0c7fdd4e9e04bff50f8ad4546c80d78066e81dc63bf35324e01f62204
Jadtre
3a37861ffad4b31c02376c1bb5f902f64711830d659f189e96018d789b0e0005
Jadtre
6d030a4dfeccb675ab51e55021a4c9e3950d3c1aa6a5728e35411674483dd64b
Jadtre
8c0593fe387aa6b741ede72da6fe6865cd16e0132075ef504f49e91e8c59c03b
Jadtre
a7a5b0ece28128c25e3a06dadb77ece32dcef5dce8fa2918166852d1cb83cb96
Jadtre
cdb8e8b7184873f01ee9c6440dd5cbb557b37d687cc09b29cec71a34d1db070a
Jadtre
e7de2449457d9b8a285a423150eb03a98dff39e1790fd64989a805c1a392284d
Jadtre
ee7765cbbb6a2a946386f14ab5a063be36c880866fcb8dd7427ecd7ac04df58c
Jadtre
+ 1'571 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
b2df94ca6a6cf89b87c3e107be00f17ba0c2663c6c6e72192554a73e8dced39f
MD5 hash:
affe1429efa473877b5cd150643fdb25
SHA1 hash:
6824c682cd02415915ebd3701a065ca9eca2dc68
Link:
https://www.unpac.me/results/2df6b656-9e98-48c0-9ce7-828b9e902e3e/
SH256 hash:
e6b693d5f1a6f97cafc47fc5d1b4586d34a5e2405c25f242dd1c521ad5c8b24b
MD5 hash:
65917495d0203224c800282a18624289
SHA1 hash:
3bc74ca1b29f87fdb23141c6b8d57ceb89f9f2b3
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/2df6b656-9e98-48c0-9ce7-828b9e902e3e/
SH256 hash:
577ce125d3450ada3e7a38b59cc930d9837eb24f0637e6f411140bdd3fdc48a7
MD5 hash:
dc988a5efd8358cce124bb946762d6c7
SHA1 hash:
731692835edad0b2bc824b0db88e5c95e3b0a16b
Link:
https://www.unpac.me/results/2df6b656-9e98-48c0-9ce7-828b9e902e3e/
SH256 hash:
c04ee948dbe7a18d97083d4b7d150ca0303777e135499e5fa1c9dc3427f6513b
MD5 hash:
3e34c407a7b96129b4e02ba75f87bd70
SHA1 hash:
cc4ca39fc7660301c1d8739175cb6a79fd68560f
Link:
https://www.unpac.me/results/2df6b656-9e98-48c0-9ce7-828b9e902e3e/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments