jaffacakes118_HEUR.Trojan.Script.Generic.f7efef5c808ba3f102faf10eefab6938

Classification: Malicious

jaffacakes118_HEUR.Trojan.Script.Generic.f7efef5c808ba3f102faf10eefab6938 is a trojan (Windows executable, 861.9 KB). Linked to Azorult malware.

Detection summary

  • 51 antivirus detections (72% detection ratio)
  • 0 IDS alerts
  • 2 processes observed
  • 0 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Malware families: AZORULT (S0344)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Azorult Cyber Threat Alliance 2026-10-14 00:21:35 2026-10-14 00:21:35 malicious-activity S0344 Azorult
Azorult Triage 2026-10-13 21:10:18 2026-10-13 21:10:18 malicious-activity
Trojan.Generic Hybrid-Analysis 2019-11-05 13:46:11 2019-11-05 13:46:11

Tags

azorult_stealer evasive azorult discovery infostealer trojan upx

Sample information

Filenames
jaffacakes118_HEUR.Trojan.Script.Generic.f7efef5c808ba3f102faf10eefab6938, F7EFEF5C808BA3F102FAF10EEFAB6938
File type
PE32 executable (GUI) Intel 80386, for MS Windows, ...
Size
882568 bytes
MD5
f7efef5c808ba3f102faf10eefab6938
SHA-1
f7aba5cebc1828799183c5686b3c219aa3aef616
SHA-256
cee77140e5a89c46386e1584146c7677539ce7cb556fb7b22717bccc0c65c8e9
First indexed
2019-11-05 13:46:11
Last updated
2026-10-13 22:00:19

Antivirus detections

EngineDetection
MicroWorld-eScanTrojan.GenericKD.32024269
FireEyeGeneric.mg.f7efef5c808ba3f1
McAfeeArtemis!F7EFEF5C808B
MalwarebytesSpyware.AzorUlt.AutoIt
ZillyaTrojan.Coins.Win32.3329
K7AntiVirusTrojan ( 0054e47a1 )
AlibabaTrojan:Win32/Starter.ali2000005
K7GWTrojan ( 0054e47a1 )
Cybereasonmalicious.c808ba
Invinceaheuristic
SymantecTrojan.Gen.MBT
APEXMalicious
AvastWin32:Evo-gen [Susp]
ClamAVWin.Malware.Azorult-6971822-0
KasperskyHEUR:Trojan.Script.Generic
BitDefenderTrojan.GenericKD.32024269
NANO-AntivirusTrojan.Win32.Stealer.fxowcj
Paloaltogeneric.ml
ViRobotTrojan.Win32.Z.Autoit.882568.AL
TencentWin32.Trojan.Autoit.Auto
SophosTroj/AutoIt-CLG
F-SecureTrojan.TR/PSW.Stealer.rujih
DrWebTrojan.PWS.Stealer.24943
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojan.AutoIt.CRYPTINJECT.SMA
McAfee-GW-EditionBehavesLike.Win32.Downloader.ch
EmsisoftTrojan.GenericKD.32024269 (B)
JiangminTrojanDropper.Dorifel.aanz
WebrootW32.Adware.Mediaget.Gen
AviraTR/PSW.Stealer.rujih
FortinetAutoIt/Injector.DZD!tr
Antiy-AVLGrayWare/Autoit.ShellCode.a
ArcabitTrojan.Generic.D1E8A6CD
AegisLabTrojan.Script.Generic.4!c
ZoneAlarmHEUR:Trojan.Script.Generic
MicrosoftPWS:Win32/Stimilina.E!bit
AhnLab-V3Trojan/Win32.Agent.C3244818
Acronissuspicious
VBA32TrojanPSW.Coins
ALYacTrojan.GenericKD.32024269
MAXmalware (ai score=83)
Ad-AwareTrojan.GenericKD.32024269
CylanceUnsafe
ESET-NOD32a variant of Win32/Packed.AutoIt.QP
TrendMicro-HouseCallTrojan.AutoIt.CRYPTINJECT.SMA
RisingPUF.Pack-AutoIt!1.B8E7 (CLASSIC)
IkarusTrojan.Autoit
GDataWin32.Trojan-Stealer.Azorult.5VUR89
AVGWin32:Evo-gen [Susp]
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Win32/Trojan.Script.ed4

DNS requests

www.lootchem.com

Process list

NameCommand line
F7EFEF5C808BA3F102FAF10EEFAB6938.exe
F7EFEF5C808BA3F102FAF10EEFAB6938.exe