Comments FRANCE - EU-CELAC Summit - May 4.js

Classification: Malicious

Comments FRANCE - EU-CELAC Summit - May 4.js is a trojan (ASCII text, 2.9 KB). Flagged by 10% of antivirus engines (6 detections).

Detection summary

  • 6 antivirus detections (10% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 1 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Intrusion sets: MUSTANG PANDA (G0129)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Ta428 Maltiverse 2023-07-04 04:29:44 2023-07-05 20:50:38 malicious-activity
Generic.Malware Maltiverse 2023-07-05 11:14:06 2023-07-05 11:14:06 G0129 Mustang Panda
Generic Malware Hybrid-Analysis 2023-07-04 14:22:01 2023-07-04 14:22:01

Tags

apt malware backdoor evasive phishing plugx

Sample information

Filenames
Comments FRANCE - EU-CELAC Summit - May 4.js
File type
ASCII text, with very long lines, with CRLF line t ...
Size
2992 bytes
MD5
95039a14b969a44dc5c44bb432d7afe9
SHA-1
6106df82c982f14165e5281bfb8d28384a20d294
SHA-256
27a61653ce4e503334413cf80809647ce5dca02ff4aea63fb3a39bc62c9c258c
First indexed
2023-07-04 14:03:30
Last updated
2026-09-18 06:35:34

Antivirus detections

EngineDetection
ALYacTrojan.Downloader.Script.gen
SymantecTrojan Horse
TrendMicro-HouseCallTrojan.JS.PHISH.AQC
TrendMicroTrojan.JS.PHISH.AQC
MicrosoftTrojan:JS/Tnega.ALY!MTB
RisingTrojan.Tnega/JS!8.13356 (TOPIS:E0:yU9b6CjdxsD)

Network contacts

82.117.255.81

DNS requests

www.jcswcd.com

Process list

NameCommand line
WScript.exe"C:\CommentsFRANCE-EU-CELACSummit-May4.js"