MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c16de58b0a20552cc79f66e4e6661f9c0882dc6c2afd07523d9107da2c8018df. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c16de58b0a20552cc79f66e4e6661f9c0882dc6c2afd07523d9107da2c8018df
SHA3-384 hash: c609cf5f8f7ef1075a0473817c946cf909a758e5cd0f27b95da69cc2dc87bc14ecae7cf123ccf48243383975d0e1c8f5
SHA1 hash: 2c1997e76f9c37ed8bbd039c380ef39aad84c49a
MD5 hash: 4311bdcab3a524efe374a7c2e1f3cf57
humanhash: monkey-tango-red-bravo
File name:c16de58b0a20552cc79f66e4e6661f9c0882dc6c2afd07523d9107da2c8018df
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-11 11:28:35 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:Vd5u7mNGtyVfvF0lQGPL4vzZq2o9W7GtxzbCX:Vd5z/fvKCGCq2iW72
Threatray 223 similar samples on MalwareBazaar
TLSH 6AC2D0B3CD8080FFC0CB3032204522C7AF575672A5AA6867A750981E7DBC9E0EA77753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
54
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c16de58b0a20552cc79f66e4e6661f9c0882dc6c2afd07523d9107da2c8018df/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-11 11:32:13 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
11ac0612988733c0050b678f0c266a7e12fe1a8c6d576ca76e6655b0fa003eaf
Jadtre
4362a8333824495a188e7617a5c9f9acaf83f5a9320a8a35869e3e3fb3eb65c3
Jadtre
4991e15c0df760ff648eaa988983e9dc7da0261b34f21a674596401052095ea0
Jadtre
55e05d48178c825c8d4c78f9a3d26a7c24c33f2908fb98e62122d1bc1f45cd40
Jadtre
6215cc698e96a7cf6704213ad9a72382a15748fd8c4b6836797cc16c88d5b7a9
Jadtre
8f6393377ef56840de1a532ab8d9f1a0bde30c828c6efe90fdee9ce89aa638b4
Jadtre
b1b574cf0ee045cec266bae1461038989da590b50d843367a1e211bc75ad97be
Jadtre
be27e56e73d3947d6d77443b3db9fa660321f352a4a45ce4c6b7e8d19b58c6c0
Jadtre
efd40caa5a6807bb528c50ff4ac15ff6df81ea85468de8cfd2e957fc0b5a9efc
Jadtre
f8153007eb292cee87f84e708c1e7a9c41298d6e9aa5cd928433f4ccfdcb5024
Jadtre
+ 213 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments