RESPEC1.JS
Classification: Malicious
RESPEC1.JS is a trojan (text/plain). Detected by 34 antivirus engines. Linked to Apt-C-36 activity. Reported by 2 threat sources, last seen 2023-03-23.
Detection summary
- 34 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: APT-C-36 (G0099)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Apt-C-36 | Maltiverse | 2023-03-22 04:37:05 | 2023-03-23 18:08:15 | malicious-activity | G0099 APT-C-36 |
| Generic.Malware | MalwareBazaar Abuse.ch | 2023-03-21 07:40:01 | 2023-03-21 07:40:01 | malicious-activity |
Tags
aptSample information
- Filenames
- RESPEC1.JS
- File type
- text/plain
- MD5
28125694ef9c9c9c6cc68b34ff289c9c- SHA-1
b80e8177259c4c22fdbe8ad3edcd4cc25927aa4e- SHA-256
d10a6df70ccbd813af1614eecf8da1485cbb45889ab6a87b410dee10e98fcfbf- First indexed
- 2023-03-21 10:18:53
- Last updated
- 2025-12-19 03:26:56
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Downloader.Script.gen |
| AVG | JS:Runner-ET [Drp] |
| Antiy-AVL | Trojan[APT]/JS.Blindeagle |
| Arcabit | Heur.BZC.PZQ.Boxter.1019.C1D32C4C |
| Avast | JS:Runner-ET [Drp] |
| BitDefender | Heur.BZC.PZQ.Boxter.1019.C1D32C4C |
| CAT-QuickHeal | cld.script.trojan.1762776459 |
| CTX | javascript.trojan.nemucod |
| Cynet | Malicious (score: 99) |
| DrWeb | Trojan.DownLoader44.46231 |
| ESET-NOD32 | JS/TrojanDownloader.Agent.ZNQ trojan |
| Emsisoft | Heur.BZC.PZQ.Boxter.1019.C1D32C4C (B) |
| Fortinet | JS/Agent.ET!tr |
| GData | Heur.BZC.PZQ.Boxter.1019.C1D32C4C |
| Detected | |
| Ikarus | Trojan-Downloader.JS.Agent |
| Kaspersky | HEUR:Trojan.Script.Generic |
| Kingsoft | Win32.Scriptc.Undef.a |
| Lionic | Trojan.Script.Boxter.4!c |
| MaxSecure | Trojan.W32.Script.Generic |
| MicroWorld-eScan | Heur.BZC.PZQ.Boxter.1019.C1D32C4C |
| Microsoft | Trojan:JS/Nemucod.SM!MTB |
| NANO-Antivirus | Trojan.Script.Heuristic-js.iacgm |
| Rising | Trojan.Nemucod/JS!8.10FD7 (TOPIS:E0:51xoTQr9BnR) |
| Sangfor | Exploit.Generic-Script.Save.dd0d52fe |
| Symantec | ISB.Downloader!gen89 |
| Tencent | Js.Trojan-Downloader.Er.Rimw |
| TrendMicro | TROJ_FRS.0NA103DK23 |
| TrendMicro-HouseCall | TROJ_FRS.0NA103DK23 |
| VIPRE | Heur.BZC.PZQ.Boxter.1019.C1D32C4C |
| Varist | ABTrojan.CLKS- |
| VirIT | Trojan.JS.Agent.MJ |
| alibabacloud | Trojan[downloader]:Javascript/Nemucod.SZ8PHU |
| huorong | SVM:TrojanDownloader/JS.Nemucod.p |