MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f2ccf201cd124fbe8fe716fc08a0fe86c4c909062d70693954247d636e1ac139. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Jadtre


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f2ccf201cd124fbe8fe716fc08a0fe86c4c909062d70693954247d636e1ac139
SHA3-384 hash: 75ecdc2376d634c9ebb3f07d96ce599dd7266d5cd420038d877ebc69e024a00ddcd4878bb32bd6227349be2722f4d129
SHA1 hash: 606526cb953b26c1576e2002e76fbe8aeb4092cf
MD5 hash: 76a488820918f6d074027efd6224dca9
humanhash: twenty-gee-avocado-twelve
File name:f2ccf201cd124fbe8fe716fc08a0fe86c4c909062d70693954247d636e1ac139
Download: download sample
Signature Jadtre
Create hunting rule
File size:27'136 bytes
First seen:2020-11-11 11:04:08 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87bed5a7cba00c7e1f4015f1bdae2183 (3'034 x Jadtre, 23 x IcedID, 17 x Blackmoon)
ssdeep 768:0d5u7mNGtyVfhPqQGPL4vzZq2o9W7GtxK5eU:0d5z/fhhGCq2iW7d
Threatray 209 similar samples on MalwareBazaar
TLSH 26C2D072CE8080FFC0CB3472204522CB9B575A72956A7867A750980E7DBCDD0EA7A753
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
53
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Asprotect-3
Create hunting rule

Win.Malware.Vtflooder-6260355-1
Create hunting rule

Win.Malware.Cerbu-9789017-0
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f2ccf201cd124fbe8fe716fc08a0fe86c4c909062d70693954247d636e1ac139/
Threat name:
Win32.Virus.Jadtre
Create hunting rule
Status:
Malicious
First seen:
2020-11-11 11:06:10 UTC
AV detection:
37 of 47 (78.72%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
04a27f1db6754956b111e4adcf6f60bc9ed3c35dfda79b430bc63b1bc8804635
Jadtre
65f21c6260515856005b436a7f3c038b7cc66de3084fcc6b7ae948b0d0e1ce02
Jadtre
82f0312af2c3115aa89fba70906d69cf09db375ff6e1f652de3665287d7b3fb2
Jadtre
8dfc2a05b98e687ed23cec07b89e0de5179adabf22640ff590b99d5b808d067a
Jadtre
944d7f2bf46f37ddedfc4aa2cef55c55b2b75bfab9e75dcf31df4eb2f6cd4f41
Jadtre
a2514c38bf49163c9522eb907b9d40d95f1e71921f27b8a49e58536bca60ee06
Jadtre
c4024ffaaccaafe6bd6e9735beed882373713cb0ec893712072547cba5ddcf75
Jadtre
d6848e933b368a32ae78d03b8321137ad8c5cd2827daddc3e4da4b45ddc235f4
Jadtre
dfd63396efea42ddead7cf2266c1816c64a39d87ac2e2a713535f0c654b8a677
Jadtre
e28bff701722074f3f40933c60b605d29021c7818bc6f4dabcba66f5b30840aa
Jadtre
+ 199 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments