MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b52b4af0d8841f5790b0d12c20eed7ef85007a5d340be52682cc07a5b45d2a0c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b52b4af0d8841f5790b0d12c20eed7ef85007a5d340be52682cc07a5b45d2a0c
SHA3-384 hash: fa80889711b9b00f54a379b09bf69f3d582b5833f1e560a0868b20cdf6c6f265381f42fc5b2d05aa3fca8f9473491257
SHA1 hash: 086b73566f7354bf899ea8a703070a654054982c
MD5 hash: cdf3a63a013d97aa8d2f612185756703
humanhash: december-comet-hot-cat
File name:b52b4af0d8841f5790b0d12c20eed7ef85007a5d340be52682cc07a5b45d2a0c
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-15 23:04:32 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:Dd5u7mNGtyVflIzqQGPL4vzZq2oZ7GTxuWqY:Dd5z/flYJGCq2w76
Threatray 487 similar samples on MalwareBazaar
TLSH 8CC2CF72CE8080FFC0CB34722045228B9B535A72956A6867A750981E7DBCDD0DA7A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
57
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b52b4af0d8841f5790b0d12c20eed7ef85007a5d340be52682cc07a5b45d2a0c/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-15 23:06:41 UTC
AV detection:
38 of 48 (79.17%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
08ede6e7f7e0d0409181139dd3b705e9170019bf98525fe24e78ec73d72a6eee
Jadtre
3078c5c29c8dc0f0df097c4f291158de91b063fddc2a28bc435d33f6e9a7f6e8
Jadtre
54b5ee16ade2e5f5756c0337688725365f7c020fdfe5673524cd884a14e22df7
Jadtre
90afc35b2680e2eaf1d68bf2f4f0c845d4ec4a75f5adaaaf945c3e192f4cc05f
Jadtre
cdb8e8b7184873f01ee9c6440dd5cbb557b37d687cc09b29cec71a34d1db070a
Jadtre
e9bf65f9d280087ba75f00dcb5dda0f44d84769217a1524cbb6a85bf973207b7
Jadtre
f2183db424759a4fe7b6e5a19c9a117bfaba83f2d93651cd894d1dd3122bdc33
Jadtre
f80aff76e95ac9c39e0eec2ae013c9ca64d7e6eda36ce1843980640a94ee2322
Jadtre
fe93e59c93c8bfa9ff2cedea280cc6e4799c7d945ce49074c4dbfd08abf2d3ae
Jadtre
ffac90760cd6fd62be45fc616ebf4c69bcc6ba22b3f0778603f5a78e6026babc
Jadtre
+ 477 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/b52b4af0d8841f5790b0d12c20eed7ef85007a5d340be52682cc07a5b45d2a0c

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments