Quickbooks-11646-June-2022 (3).wsf

Classification: Malicious

Quickbooks-11646-June-2022 (3).wsf is a malicious file sample. Linked to Jss Loader malware. Reported by 1 threat source, last seen 2022-06-23.

Detection summary

  • 21 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: JSS LOADER (S0648)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
JSSLoader MalwareBazaar Abuse.ch 2022-06-23 19:47:59 2022-06-23 19:47:59 malicious-activity S0648 JSS Loader
Generic.Malware MalwareBazaar Abuse.ch 2022-06-23 19:47:59 2022-06-23 19:47:59 malicious-activity

Sample information

Filenames
Quickbooks-11646-June-2022 (3).wsf
File type
text/html
MD5
a1f0de07fb5d2db370990a3de4935630
SHA-1
c66a6a6966e61681346d966ab4cca4bcd288de00
SHA-256
a15023ca1745e070bca7eac35a7326b3ec1691d32ac7dc5b607f0a8f53bc0f97
First indexed
2022-06-23 21:15:07
Last updated
2025-02-15 06:27:52

Antivirus detections

EngineDetection
LionicTrojan.Script.Generic.4!c
FireEyeTrojan.GenericKD.39861293
McAfeeVBS/Downloader.zq
ESET-NOD32VBS/TrojanDownloader.Agent.UQJ
AvastOther:Malware-gen [Trj]
KasperskyHEUR:Trojan-Downloader.Script.Agent.gen
BitDefenderTrojan.GenericKD.39861293
NANO-AntivirusTrojan.Script.Agent.gmbvfx
MicroWorld-eScanTrojan.GenericKD.39861293
TencentVbs.Trojan-downloader.Agent.Lnns
Ad-AwareTrojan.GenericKD.39861293
EmsisoftTrojan.GenericKD.39861293 (B)
McAfee-GW-EditionBehavesLike.HTML.Dropper.lr
GDataTrojan.GenericKD.39861293
MAXmalware (ai score=85)
ArcabitVBS.Heur.ObfDldr.31.D4D82076.Gen
ZoneAlarmHEUR:Trojan-Downloader.Script.Agent.gen
ALYacTrojan.Downloader.VBS.Agent
IkarusTrojan-Downloader.VBS.Agent
FortinetVBS/Agent.UQJ!tr
AVGOther:Malware-gen [Trj]