asdf.js
Classification: Malicious
asdf.js is a malicious file sample. Linked to Blackbyte activity. Reported by 1 threat source, last seen 2022-02-15. Detected by 59 antivirus engines.
Detection summary
- 59 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: BLACKBYTE (G1043)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Blackbyte | MalwareBazaar Abuse.ch | 2022-02-15 18:05:06 | 2022-02-15 18:05:06 | malicious-activity | G1043 BlackByte |
| Generic.Malware | MalwareBazaar Abuse.ch | 2022-02-15 18:05:06 | 2022-02-15 18:05:06 | malicious-activity |
Sample information
- Filenames
- asdf.js
- File type
- text/plain
- MD5
eef977108c7a7aef512532cc6e2f49cc- SHA-1
7273bf0db30a12428f7046ef99ebe3e7472cdfbe- SHA-256
884e96a75dc568075e845ccac2d4b4ccec68017e6ef258c7c03da8c88a597534- First indexed
- 2022-02-15 19:15:04
- Last updated
- 2026-05-16 05:43:07
Antivirus detections
| Engine | Detection |
|---|---|
| Lionic | Trojan.Script.Cryxos.4!c |
| Cynet | Malicious (score: 99) |
| CAT-QuickHeal | JS.BlackByte.44657 |
| ALYac | Trojan.Downloader.Script.gen |
| Sangfor | Malware.Generic-HTML.Save.98706975 |
| Cyren | Trojan.XRWE-2 |
| Symantec | Trojan Horse |
| ESET-NOD32 | JS/TrojanDropper.Agent.OHL |
| TrendMicro-HouseCall | Ransom.JS.BLACKBYTE.AA |
| Avast | Other:Malware-gen [Trj] |
| ClamAV | Win.Ransomware.BlackByte-9915811-0 |
| Kaspersky | HEUR:Trojan.Script.SAgent.gen |
| BitDefender | JS:Trojan.Cryxos.4898 |
| NANO-Antivirus | Trojan.Script.ExpKit.fmnear |
| ViRobot | JS.S.Agent.637055 |
| MicroWorld-eScan | JS:Trojan.Cryxos.4898 |
| Tencent | Win32.Trojan.Cryxos.Aqgn |
| Ad-Aware | JS:Trojan.Cryxos.4898 |
| Emsisoft | JS:Trojan.Cryxos.4898 (B) |
| DrWeb | Trojan.Siggen14.62190 |
| TrendMicro | Ransom.JS.BLACKBYTE.AA |
| McAfee-GW-Edition | VBS/Agent.hr |
| FireEye | JS:Trojan.Cryxos.4898 |
| Sophos | JS/Drop-CSQ |
| Ikarus | HTML.Crypted |
| GData | JS:Trojan.Cryxos.4898 |
| Avira | HTML/Crypted.Gen |
| Arcabit | JS:Trojan.Cryxos.D1322 |
| Microsoft | Trojan:VBS/Obfuse!MSR |
| AhnLab-V3 | Trojan/JS.Agent |
| MAX | malware (ai score=100) |
| Rising | Dropper.Agent!8.2F (TOPIS:E0:2NmOTzszVxK) |
| Fortinet | JS/Agent.49CC!tr |
| AVG | Other:Malware-gen [Trj] |
| AhnLab-V3 | Malware/JS.Generic.SC180742 |
| Antiy-AVL | Trojan/Script.SAgent |
| Arcabit | GT:JS.Divergent.3.40E97E4F |
| Avira | JS/BlkByte.G |
| BitDefender | GT:JS.Divergent.3.40E97E4F |
| CTX | javascript.trojan.generic |
| ESET-NOD32 | JS/TrojanDropper.Agent.OHL trojan |
| Emsisoft | GT:JS.Divergent.3.40E97E4F (B) |
| F-Secure | Malware.JS/BlkByte.G |
| Fortinet | JS/Agent.OHL!tr |
| GData | GT:JS.Divergent.3.40E97E4F |
| Detected | |
| Lionic | Trojan.Script.Divergent.4!c |
| MicroWorld-eScan | GT:JS.Divergent.3.40E97E4F |
| Skyhigh | VBS/Agent.hr |
| Tencent | Script.Trojan.Sagent.Majl |
| TrellixENS | VBS/Agent.hr |
| TrendMicro | Ransom.JS.BLACKBYTE.YXBJR |
| TrendMicro-HouseCall | Ransom.JS.BLACKBYTE.YXBJR |
| VIPRE | GT:JS.Divergent.3.40E97E4F |
| Varist | ABRisk.XRWE-2 |
| Xcitium | Malware@#3b6oh8a2zvxwi |
| ZoneAlarm | JS/Drop-CSQ |
| alibabacloud | Trojan[dropper]:Javascript/Obfuse.Gen |
| huorong | TrojanDownloader/JS.Agent.co |