jaffacakes118_Backdoor.Win32.Androm.ezvw.3fce9f284038165991620d69a4d7788c
Classification: Malicious
jaffacakes118_Backdoor.Win32.Androm.ezvw.3fce9f284038165991620d69a4d7788c is a trojan. Detected by 53 antivirus engines. Linked to Guloader malware.
Detection summary
- 53 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: GULOADER (S0561)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Guloader | Triage | 2026-10-15 04:07:57 | 2026-10-15 04:07:57 | malicious-activity | S0561 GuLoader |
Tags
guloader bootkit credential_access discovery downloader persistence spyware stealerSample information
- Filenames
- jaffacakes118_Backdoor.Win32.Androm.ezvw.3fce9f284038165991620d69a4d7788c
- SHA-256
ca10201ff20bd26c885e1902d923312e10dcc9f2ec59ab3a00823f93944bec3b- First indexed
- 2026-10-15 04:07:57
- Last updated
- 2026-10-15 04:07:57
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Heur.ZOF.2 |
| APEX | Malicious |
| AVG | Win32:Inject-ABQ [Trj] |
| Ad-Aware | Gen:Heur.ZOF.2 |
| AhnLab-V3 | Trojan/Win32.VBKrypt.R2457 |
| Alibaba | Backdoor:Win32/Androm.34a57499 |
| Antiy-AVL | Trojan/Generic.ASMalwS.9D74F |
| Avast | Win32:Inject-ABQ [Trj] |
| Avira | TR/Dropper.Gen |
| BitDefender | Gen:Heur.ZOF.2 |
| BitDefenderTheta | AI:Packer.8EDCE9CE20 |
| ClamAV | Win.Trojan.Agent-990528 |
| Comodo | Malware@#1kah454ao8v0t |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cybereason | malicious.840381 |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| Cyren | W32/Risk.XBWP-4830 |
| DrWeb | Trojan.PWS.Winlog.29 |
| ESET-NOD32 | a variant of Win32/Injector.ECL |
| Elastic | malicious (high confidence) |
| FireEye | Generic.mg.3fce9f2840381659 |
| Fortinet | W32/AutoRun.BZAC!worm |
| GData | Gen:Heur.ZOF.2 |
| Ikarus | Virus.Win32.VBInject |
| Jiangmin | Backdoor.Androm.dnn |
| K7AntiVirus | NetWorm ( 700000151 ) |
| K7GW | NetWorm ( 700000151 ) |
| Kaspersky | Backdoor.Win32.Androm.ezvw |
| Kingsoft | Win32.Hack.Androm.ez.(kcloud) |
| Lionic | Trojan.Win32.Androm.m!c |
| MAX | malware (ai score=100) |
| Malwarebytes | Malware.AI.740877598 |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfee | RDN/Generic BackDoor |
| McAfee-GW-Edition | BehavesLike.Win32.Kovter.gc |
| MicroWorld-eScan | Gen:Heur.ZOF.2 |
| NANO-Antivirus | Trojan.Win32.Winlog.hadrwm |
| Paloalto | generic.ml |
| SUPERAntiSpyware | Trojan.Agent/Gen-STHand |
| SentinelOne | Static AI - Suspicious PE |
| Sophos | Mal/Generic-R + Mal/VBCheMan-A |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Malware.Win32.Gencirc.114c1f4e |
| TrendMicro | TROJ_GEN.R002C0DHN21 |
| TrendMicro-HouseCall | TROJ_GEN.R002C0DHN21 |
| VBA32 | Trojan.VBRA.07056 |
| VIPRE | LooksLike.Win32.Malware!vb (v) |
| ViRobot | Worm.Win32.A.AutoRun.249856.B |
| Webroot | W32.HackTool.VBInject |
| Yandex | Trojan.GenAsa!hjLl4pjNsac |
| Zillya | Worm.AutoRun.Win32.36830 |
| eGambit | Unsafe.AI_Score_96% |