jaffacakes118_Client4PRO.exe
Classification: Malicious
jaffacakes118_Client4PRO.exe is a trojan (Windows executable, 5.2 MB). Flagged by 47% of antivirus engines (33 detections). Linked to Hydraq malware.
Detection summary
- 33 antivirus detections (47% detection ratio)
- 0 IDS alerts
- 2 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Aurora |
Triage |
2026-10-06 07:37:20 |
2026-10-06 07:37:20 |
malicious-activity
|
S0203 Hydraq
|
| Generic Malware |
Hybrid-Analysis |
2023-04-07 21:45:03 |
2023-04-07 21:45:03 |
|
|
Tags
aurora
discovery
stealer
Sample information
- Filenames
- jaffacakes118_Client4PRO.exe, Client4PRO.exe
- File type
- PE32 executable (console) Intel 80386, for MS Windows
- Size
- 5449728 bytes
- MD5
fd12c0fbfbb2848e7cb470a3d0e5a0f3
- SHA-1
089b54dbafd1a192dca0f099d719619e05ee6744
- SHA-256
f29674f4ff212ddd6cb0cc7c0d5bdc6a81de215ba24a03e2b1246ec15d646d87
- First indexed
- 2023-04-07 21:18:52
- Last updated
- 2026-10-07 08:33:50
Antivirus detections
| Engine | Detection |
| Bkav | W32.AIDetectNet.01 |
| Cynet | Malicious (score: 100) |
| VIPRE | Gen:Variant.Lazy.324972 |
| Sangfor | Trojan.Win32.Save.a |
| CrowdStrike | win/grayware_confidence_60% (D) |
| Symantec | ML.Attribute.HighConfidence |
| Elastic | malicious (high confidence) |
| ESET-NOD32 | a variant of Win32/Kryptik.HSKS |
| APEX | Malicious |
| Kaspersky | HEUR:Trojan-Spy.Win32.Stealer.gen |
| BitDefender | Gen:Variant.Lazy.324972 |
| MicroWorld-eScan | Gen:Variant.Lazy.324972 |
| Avast | Win32:Evo-gen [Trj] |
| Emsisoft | Gen:Variant.Lazy.324972 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1317015 |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.tc |
| Trapmine | malicious.high.ml.score |
| FireEye | Generic.mg.fd12c0fbfbb2848e |
| Sophos | ML/PE-A |
| SentinelOne | Static AI - Suspicious PE |
| Avira | HEUR/AGEN.1317015 |
| MAX | malware (ai score=83) |
| Microsoft | Trojan:Win32/Sabsik.FL.B!ml |
| Arcabit | Trojan.Lazy.D4F56C |
| ZoneAlarm | HEUR:Trojan-Spy.Win32.Stealer.gen |
| GData | Gen:Variant.Lazy.324972 |
| ALYac | Gen:Variant.Lazy.324972 |
| Cylance | unsafe |
| Rising | [email protected] (RDML:/vYyP+KfXzYA2da/JKehPA) |
| Fortinet | W32/Kryptik.HSKS!tr |
| BitDefenderTheta | Gen:NN.ZexaF.36132.@xW@aOunvC |
| AVG | Win32:Evo-gen [Trj] |
| DeepInstinct | MALICIOUS |
Process list
| Name | Command line |
| Client4PRO.exe | |
| InstallUtil.exe | |