Purchase Order - PO-2603113056899.JS
Classification: Malicious
Purchase Order - PO-2603113056899.JS is a malicious file sample (script). Linked to Agent Tesla malware. Reported by 3 threat sources, last seen 2026-10-16.
Detection summary
- 0 antivirus detections
- 2 IDS alerts
- 0 processes observed
- 1 contacted hosts
- 1 DNS requests
MITRE ATT&CK associations
Malware families: AGENT TESLA (S0331)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-10-16 18:45:04 | 2026-10-16 18:45:04 | malicious-activity | |
| Agent Tesla | Triage | 2026-10-15 11:07:14 | 2026-10-15 11:07:14 | malicious-activity | |
| AgentTesla | MalwareBazaar Abuse.ch | 2026-10-15 11:06:30 | 2026-10-15 11:06:30 | malicious-activity | S0331 Agent Tesla |
Tags
agenttesla donutloader collection discovery execution keylogger loader spyware stealer trojan evasiveSample information
- Filenames
- Purchase Order - PO-2603113056899.JS, Purchase Order - PO-2603113056899.JS.js
- File type
- JavaScript source, Unicode text, UTF-8 text, with ...
- MD5
13fe5044cc4fec5e73572c989a71d13e- SHA-1
ce7fd8a308befce48a7e9499f506c979cd69a3d5- SHA-256
83c2b1f8a3a78edeb1a1750d883c92ceadb122fec2361f24ecacb25610179c5f- First indexed
- 2026-10-15 11:06:30
- Last updated
- 2026-10-16 18:45:04