MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b6f2a8d3ce9779a50cb754e0bbb74c9283a92329aae65a10540b28fba8582f1b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b6f2a8d3ce9779a50cb754e0bbb74c9283a92329aae65a10540b28fba8582f1b
SHA3-384 hash: 6139e11527e7cd747bbb6ded87bc6ba89272566ef392ad9deb5702815bb158737c22bc10093ad9192dc6d95810b84971
SHA1 hash: e2a1c6b1f579cf70c88653b26a863c12ce7d3da9
MD5 hash: 0230cd6112b17e5bb7abbcb1e6841247
humanhash: robert-texas-chicken-fix
File name:adc0bd0167be407be144ecc93437c026
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 14:04:38 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:6d5u7mNGtyVfvjrfQGPL4vzZq2oZ7GtxBtaj:6d5z/fvf4GCq2w7C
Threatray 1'382 similar samples on MalwareBazaar
TLSH DBC2D072CE8084FFC0CB3432208522C79B575A72957A6867A710D81E7DBCDE0EA7A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
51
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Sending a UDP request
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b6f2a8d3ce9779a50cb754e0bbb74c9283a92329aae65a10540b28fba8582f1b/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 14:05:23 UTC
AV detection:
28 of 29 (96.55%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
6bb2a9c618f6e062c9f005b2fbf708c4d80380abbc8a63472fe941c370e23e11
Jadtre
6e3fab9c8252f0077543b342e98abfcc9c9d859824bfca4610d62bed8036a91c
Jadtre
7c226dfeea264d1aebd2da6baf8ba5d7ccdf1fce5f8d794c13dec9a464394c96
Jadtre
7c45f4ecc682952af0c09d63944149082273a9b8efdceb881e1322f635ddca76
Jadtre
8c9cbaa2d1104581ecc20ed1d05261fcf78dc3e14dbb1c9fcab2267ceb658816
Jadtre
970e77f3843d8c84fc64f41ca1e1415740a9a70516f5d03089d1ad2b5946cdfd
Jadtre
9cea2cbb528dfd3bbac3b8c0f26963ccd742567a293645c9bbf1b315df23e6b3
Jadtre
b1f5bfa07b6b2fe4625891fe1b804005b0bc9d9a267a560fd1a0a2b3c0cdc009
Jadtre
fb1ef3911dec22b612cb310b7afcd289af74c8ca0b5be5dcba13cf3332d6bf2a
Jadtre
ffac90760cd6fd62be45fc616ebf4c69bcc6ba22b3f0778603f5a78e6026babc
Jadtre
+ 1'372 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
b6f2a8d3ce9779a50cb754e0bbb74c9283a92329aae65a10540b28fba8582f1b
MD5 hash:
0230cd6112b17e5bb7abbcb1e6841247
SHA1 hash:
e2a1c6b1f579cf70c88653b26a863c12ce7d3da9
Link:
https://www.unpac.me/results/338f5585-4cc5-4a31-a6f9-1910ea19a183/
SH256 hash:
e176b98b11cbebc009ea333d6dc72d31c614a346b24a75b402585ab2f3e0732e
MD5 hash:
a985318f5bd7fd6777663c497bfa2f41
SHA1 hash:
705f3607fad8608820204e2cf9626b612a4864a8
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/338f5585-4cc5-4a31-a6f9-1910ea19a183/
SH256 hash:
de5b31c24d7979f8ac137e4bacc4e449076f5545f8eb531df38e1404328d4345
MD5 hash:
5f47aef8830e4de96b8bb458ecf9d5d9
SHA1 hash:
b4138eac06ac1006572be52f896bcf0d50c61ade
Link:
https://www.unpac.me/results/338f5585-4cc5-4a31-a6f9-1910ea19a183/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments