84f2a6dec84bba3c40a0b36d426045c4d34b815385cf98773957b625f3d63c64
Classification: Malicious
84f2a6dec84bba3c40a0b36d426045c4d34b815385cf98773957b625f3d63c64 is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02.
Detection summary
- 27 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 1 contacted hosts
- 7 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-02 22:45:08 | 2026-09-02 22:45:08 | malicious-activity | |
| CredentialFlusher | MalwareBazaar Abuse.ch | 2024-11-24 22:23:02 | 2024-11-24 22:23:02 | malicious-activity |
Tags
evasiveSample information
- Filenames
- 84f2a6dec84bba3c40a0b36d426045c4d34b815385cf98773957b625f3d63c64, file
- File type
- application/x-dosexec
- MD5
ff11ae234a4cc63ae952def66174b9fb- SHA-1
dbd5118361c76bdd0912f2cdf30329885d554f6d- SHA-256
84f2a6dec84bba3c40a0b36d426045c4d34b815385cf98773957b625f3d63c64- First indexed
- 2024-11-24 23:18:22
- Last updated
- 2026-09-02 22:45:08
Antivirus detections
| Engine | Detection |
|---|---|
| APEX | Malicious |
| Bkav | W32.AIDetectMalware |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Siggen29.54908 |
| ESET-NOD32 | a variant of Win32/Autoit.ORL |
| Elastic | malicious (high confidence) |
| FireEye | Generic.mg.ff11ae234a4cc63a |
| Fortinet | AutoIt/Agent.ORL!tr |
| Detected | |
| Ikarus | Trojan.Win32.Autoit |
| Kaspersky | HEUR:Trojan.Script.Generic |
| Malwarebytes | Trojan.Downloader.AutoIt |
| MaxSecure | Trojan.Malware.121218.susgen |
| McAfeeD | Real Protect-LS!FF11AE234A4C |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| Rising | Stealer.Browser/Autoit!1.10428 (CLASSIC) |
| Sangfor | Trojan.Win32.Save.a |
| Skyhigh | BehavesLike.Win32.Genericuh.dh |
| Symantec | Scr.Malcode!gen |
| Tencent | Unk.Win32.Script.404787 |
| Trapmine | suspicious.low.ml.score |
| VBA32 | Trojan.Autoit.Flush |
| Varist | W32/AutoIt.ACA.gen!Eldorado |
| VirIT | Trojan.Win32.AutoIt_Heur.K |
| huorong | Trojan/AutoIT.Agent.f |
Network contacts
DNS requests
d156sk07toobyl.cloudfront.net detectportal.firefox.com mozilla.map.fastly.net prod.refractr.prod.webservices.mozgcp.net safebrowsing.googleapis.com shavar.prod.mozaws.net tracking-protection.prod.mozaws.net