jaffacakes118_sample.bin

Classification: Malicious

jaffacakes118_sample.bin is a trojan (Windows executable, 151.5 KB). Flagged by 46% of antivirus engines (79 detections). Linked to Azorult malware.

Detection summary

  • 79 antivirus detections (46% detection ratio)
  • 1 IDS alerts
  • 2 processes observed
  • 2 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Malware families: AZORULT (S0344)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Azorult Triage 2026-10-10 12:05:18 2026-10-10 12:05:18 malicious-activity S0344 Azorult
Trojan.Generic Hybrid-Analysis 2018-05-24 02:15:52 2018-05-24 02:15:52

Tags

azorult discovery infostealer trojan

Sample information

Filenames
jaffacakes118_sample.bin, rbC3UYyFlz.exe
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
155136 bytes
MD5
20684a4a538ad0dd34653053767b7afd
SHA-1
3540fd15f8df644d1fd250269e4fe9a76bb56472
SHA-256
bbc503fdf9d205cc5ac07c8b373825d57a99fd15840223fe7a089fce825f070b
First indexed
2018-05-24 02:15:52
Last updated
2026-10-12 06:01:48

Antivirus detections

EngineDetection
MicroWorld-eScanTrojan.GenericKD.30852634
CylanceUnsafe
BaiduWin32.Trojan.WisdomEyes.16070401.9500.9997
BabableMalware.HighConfidence
CyrenW32/Trojan.ENEL-3411
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallSuspicious_GEN.F47V0522
AvastWin32:Malware-gen
KasperskyTrojan-PSW.Win32.Coins.alc
ArcabitTrojan.Generic.D1D6C61A
Paloaltogeneric.ml
AegisLabMl.Attribute.Gen!c
Ad-AwareTrojan.GenericKD.30852634
EmsisoftTrojan.GenericKD.30852634 (B)
F-SecureTrojan.GenericKD.30852634
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Shodi.cm
SophosMal/Generic-S
AviraTR/Crypt.Xpack.hgyky
Antiy-AVLTrojan[PSW]/Win32.Coins
Endgamemalicious (high confidence)
MicrosoftTrojan:Win32/Cloxer.D!cl
ZoneAlarmTrojan-PSW.Win32.Coins.alc
GDataTrojan.GenericKD.30852634
McAfeeRDN/Generic.grp
ESET-NOD32a variant of Win32/Kryptik.FYDC
SentinelOnestatic engine - malicious
FortinetW32/Kryptik.GGXB!tr
AVGWin32:Malware-gen
PandaTrj/CI.A
ALYacGen:Variant.Razy.335806
APEXMalicious
AhnLab-V3Trojan/Win32.Cloxer.C2533230
AlibabaTrojanPSW:Win32/Coins.035d4465
ArcabitTrojan.Razy.D51FBE
AviraHEUR/AGEN.1347210
BitDefenderGen:Variant.Razy.335806
BkavW32.AIDetectMalware
CTXexe.unknown.razy
CrowdStrikewin/malicious_confidence_100% (W)
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
DrWebTrojan.Fakealert.58463
ESET-NOD32Win32/PSW.Delf.OSF
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Razy.335806 (B)
F-SecureHeuristic.HEUR/AGEN.1347210
FireEyeGeneric.mg.20684a4a538ad0dd
GDataGen:Variant.Razy.335806
GoogleDetected
IkarusTrojan.Win32.Krypt
JiangminTrojan.PSW.Coins.ff
K7AntiVirusTrojan ( 005327911 )
K7GWTrojan ( 005327911 )
Kingsoftmalware.kb.a.999
LionicTrojan.Win32.Coins.4!c
MalwarebytesGeneric.Malware/Suspicious
MaxSecureTrojan.Malware.300983.susgen
McAfeeGenericRXFR-FF!20684A4A538A
McAfeeDReal Protect-LS!20684A4A538A
MicroWorld-eScanGen:Variant.Razy.335806
MicrosoftTrojan:Win32/Wacatac.B!ml
NANO-AntivirusTrojan.Win32.Coins.fcmgnp
RisingStealer.Delf!8.415 (TFE:2:Hd3QTs8gpXP)
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Upatre.cm
TencentWin32.Trojan-QQPass.QQRob.Osmw
Trapminemalicious.high.ml.score
TrendMicroRansom.Win32.BITPAYMER.SM.hp
TrendMicro-HouseCallRansom.Win32.BITPAYMER.SM.hp
VBA32BScope.TrojanPSW.Coins
VIPREGen:Variant.Razy.335806
WebrootW32.Trojan.GenKD
XcitiumMalware@#18vgkpr0z8ixn
YandexTrojan.PWS.Coins!M+FOW9Isrq4
ZillyaTrojan.Coins.Win32.88
alibabacloudWorm:Win/Delf.OSF
huorongHEUR:VirTool/Obfuscator.gen!B
tehtrisGeneric.Malware

Network contacts

101.226.79.205 47.74.242.102

DNS requests

connectionfailed.bit

Process list

NameCommand line
rbC3UYyFlz.exe
cmd.exe/c timeout 4 & del "rbC3UYyFlz.exe"