MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b54ddeda21c7b0c1179d59a7bc6792c537c13a7d20b9500b4977cf7f37cc179d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b54ddeda21c7b0c1179d59a7bc6792c537c13a7d20b9500b4977cf7f37cc179d
SHA3-384 hash: d59530f04b0262d8983fe32cddcbad56a2a916018ee9fd01d1e17c7d56d46ff9a01de6333c5341798c6bd4bff9a42879
SHA1 hash: 87907ec003dc550377e5185d572183c87d770045
MD5 hash: efc18f1488b1e60fa35f4f6e7a180546
humanhash: johnny-wisconsin-kitten-zulu
File name:acfa8a5192f8e3b38f57245b25e6d37f
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 14:47:48 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:8d5u7mNGtyVfvg7QGPL4vzZq2o9W7GTx2Vi9:8d5z/fvVGCq2iW7l
Threatray 1'274 similar samples on MalwareBazaar
TLSH 2CC2D073CE8080FFC0CB3432208521DB9B575A72556A7867A750881E7DBCDD0DA7A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
52
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b54ddeda21c7b0c1179d59a7bc6792c537c13a7d20b9500b4977cf7f37cc179d/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 14:49:03 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
1700e21eb808b6b3a61c05dca098bd6686cdbd14fdf8d5cd733e9c7620d10dd0
Jadtre
24c1fc99e66f28e27ff386a6834bf4a7100e44fb2a409be8676af8dc1ec71b3a
Jadtre
3aeb6053d169ae15647a49432d2cb8282d09059a916ffaae93252258ecb6307e
Jadtre
5c4db310ce8e133db909cfe5e82845c9a8a99f4b56694ece56d98185ae02b372
Jadtre
62812326597504758de0e9f760f581e4aae13a4b5043767bad3ee2b3e478d73b
Jadtre
742f3331d0c9efcff7e43626d6bf6adeef05c4bb09cda59d2d853a17ee3b6fce
Jadtre
7a486efe469c99ccd9b7e122a4b033c5f85c7314a46194e3e158195145575be2
Jadtre
823040c20dd55365284aa7b8fc922e14d7f9d5aaeb2892401b4cf7262467ceb5
Jadtre
bf30ad63fda0d0e3865534469828e51c0369e53b5aec1169f20d71c80010cbc8
Jadtre
ccaa72baeba64506a42402cd55eb62dcc5990617c7b2bb73528d37da764c4daf
Jadtre
+ 1'264 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
b54ddeda21c7b0c1179d59a7bc6792c537c13a7d20b9500b4977cf7f37cc179d
MD5 hash:
efc18f1488b1e60fa35f4f6e7a180546
SHA1 hash:
87907ec003dc550377e5185d572183c87d770045
Link:
https://www.unpac.me/results/eb30c0cf-cd41-460b-bfb6-5793ab21c919/
SH256 hash:
de538048ed36ee54eebbe64844bf7d8a2c51bf25e9b7b30212735b8f6886b813
MD5 hash:
80bb72547605e86d9ac6982396a6e953
SHA1 hash:
265ccfe94353f24f6a95a1fb5fd9ebb5e0a45944
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/eb30c0cf-cd41-460b-bfb6-5793ab21c919/
SH256 hash:
fd38f5f07c0962e61e0a65b44c54e42203fd0da0fd88f431473130716b0c9e0b
MD5 hash:
823103ea4db6c9f90a8b82d7d145c470
SHA1 hash:
ad2de27a1c9b5d3e325b8db8c1313c8cea32bb9b
Link:
https://www.unpac.me/results/eb30c0cf-cd41-460b-bfb6-5793ab21c919/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments