MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cfcdf86fcee3558ed8d11fdbef40dd595105f0e39b64a8b0dab91f287bc6ed3a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: cfcdf86fcee3558ed8d11fdbef40dd595105f0e39b64a8b0dab91f287bc6ed3a
SHA3-384 hash: 1f40fe557d9e657caefeb28d7e2650f141240d631522650d0ddf8def7bc0e93b2e2c3f7f8678f93e0a175b7f644b2203
SHA1 hash: c2db57fa4b8cc0db2818bdb11de471ad511c627e
MD5 hash: 672956995185b4b84d6be1678f519294
humanhash: india-undress-nuts-emma
File name:aea501b41357d0b87d6ae0a511c4d381
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-17 14:03:42 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:Ud5u7mNGtyVflfIQGPL4vzZq2oZ7GkxcnbH:Ud5z/fl7GCq2w7s
Threatray 546 similar samples on MalwareBazaar
TLSH 54C2C073CE8081FFC0CB3432208521CB9B575A72A56A6867A710981E7DBCDE0E977757
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
49
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Changing an executable file
DNS request
Connection attempt
Sending an HTTP POST request
Modifying an executable file
Creating a file
Running batch commands
Creating a process with a hidden window
Connection attempt to an infection source
Infecting executable files
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/cfcdf86fcee3558ed8d11fdbef40dd595105f0e39b64a8b0dab91f287bc6ed3a/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 14:04:31 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
10495dbe08bc6f5fcc638cb8ba091b9a9c53b95819bf86a5b1217a2a32e67fb6
Jadtre
2b7af1d6085e37a2f6feaa90b7e14b8f68cc47c80fbc837dbfeb6a603637414e
Jadtre
31d0ae9303ba1049d7ad02b1f9d732327f4e97f99f2aec4d5154b2beaa88951c
Jadtre
401083fefbd11ea89d16ed4dd0ea233248fc1fdcff54ea323f5ee4e61ec4f9dc
Jadtre
6be80e93dfa0b4687c4e5a88adc1b16ad1870e6990fc054b817edeb9b37f33b9
Jadtre
6c17d97c07a666ecbd8e38f4de21e48984396d8d840a485c9ec8c0174a0a51d3
Jadtre
78a3b5121cf08fedb35cf096325858bb52c3ea25e25717f3448673313c9d9b72
Jadtre
80b93d94907d174a6fd621bc866b4551fdab2edb9671ae8e391ea7714f8d488a
Jadtre
c1846a5f77b09f059b009ea76004fe57a2cc66bb25e5c744a5fad7513b28095a
Jadtre
e15d042cd0f53d29d6e076b7d81a358b2cd96db9f80e609b7162df3930a39784
Jadtre
+ 536 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
cfcdf86fcee3558ed8d11fdbef40dd595105f0e39b64a8b0dab91f287bc6ed3a
MD5 hash:
672956995185b4b84d6be1678f519294
SHA1 hash:
c2db57fa4b8cc0db2818bdb11de471ad511c627e
Link:
https://www.unpac.me/results/c569df4e-c51d-41e7-bbe6-1956f67e62e0/
SH256 hash:
2ff74d0ef0c6e6d4236e75cda0d31337913c0633129ba15580cce20362786c46
MD5 hash:
9c11520bea813380d78cb10cb856bc85
SHA1 hash:
c093ef6c8b8ad0a6a0c8fcb5ab7d0067f78a41d4
Detections:
win_unidentified_045_g0
Create hunting rule
win_unidentified_045_auto
Create hunting rule
Link:
https://www.unpac.me/results/c569df4e-c51d-41e7-bbe6-1956f67e62e0/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments