General
- Target jaffacakes118_Backdoor.Win32.Androm.juyk.1de2c0cfe9036b094b30ee2aa7925f4f
- Size 956KB
- Sample261012-3vfxsafe74
- SHA256 359ccc90ba8792121954be25d7a8db01f6110fcd44bce38ed0715515cb9b1119
- MD5 1de2c0cfe9036b094b30ee2aa7925f4f
- SHA1 f5d85bbe9f98bb9444f76478867a2e90cfe9e7b8
- SHA512 7f4c9cb6ca437db6cc5cec3f10ad795a79b43e27ba1be97fe1634b5d69ea04ee1ef719e29af4bd58dcaa13ccaf32aa46c43a2e5db6a5aa28b2a90ea273b02c32
- SSDEEP 24576:cM/jpTa/blI0SMYU+aJ2Pb9U9rJfeQ6QPfnnSXr:cwupIJZkJ2PbG1JfSgvo
- TLSH T19C25333882FD4794F5DFCF38302D682DE1E24E8198D4D0A75CF2A91DA0A2F5B867159D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Backdoor.Win32.Androm.juyk.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Backdoor.Win32.Androm.juyk.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Backdoor.Win32.Androm.juyk.1de2c0cfe9036b094b30ee2aa7925f4f
- Size 956KB
- SHA256 359ccc90ba8792121954be25d7a8db01f6110fcd44bce38ed0715515cb9b1119
- MD5 1de2c0cfe9036b094b30ee2aa7925f4f
- SHA1 f5d85bbe9f98bb9444f76478867a2e90cfe9e7b8
- SHA512 7f4c9cb6ca437db6cc5cec3f10ad795a79b43e27ba1be97fe1634b5d69ea04ee1ef719e29af4bd58dcaa13ccaf32aa46c43a2e5db6a5aa28b2a90ea273b02c32
- SSDEEP 24576:cM/jpTa/blI0SMYU+aJ2Pb9U9rJfeQ6QPfnnSXr:cwupIJZkJ2PbG1JfSgvo
- TLSH T19C25333882FD4794F5DFCF38302D682DE1E24E8198D4D0A75CF2A91DA0A2F5B867159D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application