MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f15363f1f5b4778e50e2b1689eb7e35368a4779bc4e22c4502ae2015147a153c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f15363f1f5b4778e50e2b1689eb7e35368a4779bc4e22c4502ae2015147a153c
SHA3-384 hash: 56b650fe6951ed65952d00b03f966e770345d9418d33d2e1965554a99c7feaa0ea14dcbd254ed6eed45e41fc950ce3cf
SHA1 hash: 8278cfedb145d9cf512207827774583a419e5ff4
MD5 hash: a257508b6a1ce84385332e8e3f19f14c
humanhash: mexico-west-kansas-thirteen
File name:f15363f1f5b4778e50e2b1689eb7e35368a4779bc4e22c4502ae2015147a153c
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-10 11:14:35 UTC
Last seen:2024-07-24 22:56:13 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:sd5u7mNGtyVfVlQGPL4vzZq2o9W7GTxiUuV:sd5z/fcGCq2iW7x
Threatray 137 similar samples on MalwareBazaar
TLSH 86C2D073CE8080BFC0CB3472208512CBDB535A7265AA7867A750981E7DBCDE0E97A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
2
# of downloads :
56
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f15363f1f5b4778e50e2b1689eb7e35368a4779bc4e22c4502ae2015147a153c/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-10 11:18:24 UTC
AV detection:
38 of 48 (79.17%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
1904e2084523796c9f58265da38c243f804d9420d51214357451b5ecc7838706
Jadtre
1a7f94731f5a806a7561ba82c770675dac4507ed85fd62c7d1bc51fd4cd21722
Jadtre
68d2bceea00c4327471b020c76f5c1b4312c1250520b112b580fbe134f2a87d1
Jadtre
8ca92e67030faa78196918f651558bd105cda99d041da0dbe57f431885786a82
Jadtre
8d9e3672d10f30f9aaa1b4465e39369140992f58b2a56f43193d6941b877c842
Jadtre
ac7496fd809dda0c639c4571b42287df2384e81429378ee226e41f067873bc9f
Jadtre
e15d042cd0f53d29d6e076b7d81a358b2cd96db9f80e609b7162df3930a39784
Jadtre
eb16e3e0221cb70db563310ee0c1fff69bc48e3d9d290d3af5cc51fece49c5aa
Jadtre
efd40caa5a6807bb528c50ff4ac15ff6df81ea85468de8cfd2e957fc0b5a9efc
Jadtre
fe761a147fbcd85bdbdd53cd4d7675100ac1604e7a25e0da9ea4c9a19a828338
Jadtre
+ 127 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments