IMG - stampa il campione di pagamento di 2 pagine in 1 A4..js

Classification: Malicious

IMG - stampa il campione di pagamento di 2 pagine in 1 A4..js is a trojan. Detected by 42 antivirus engines. Linked to Agent Tesla, Guloader malware.

Detection summary

  • 42 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: AGENT TESLA (S0331) GULOADER (S0561)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
GuLoader MalwareBazaar Abuse.ch 2026-06-01 14:54:07 2026-06-01 14:54:07 malicious-activity S0561 GuLoader
Generic Malware Triage 2026-06-01 11:55:47 2026-06-01 11:55:47 malicious-activity
Agent Tesla Triage 2026-06-01 11:48:18 2026-06-01 11:48:18 malicious-activity S0331 Agent Tesla

Tags

agenttesla adware collection discovery execution keylogger spyware stealer trojan

Sample information

Filenames
IMG - stampa il campione di pagamento di 2 pagine in 1 A4..js, -214..js, ЗОБРАЖЕННЯ - друк оплати 2 сторінки зразок в 1 А4..js
MD5
664cdb7f652f865793113d61421217c9
SHA-1
9e0b60c8cc4b596201ef662740cec1e430c4b3ca
SHA-256
dd70f6f9b5276fdb2e2c79d6650e993c7dd08fc34a3529ddfb10744dabd645e8
First indexed
2026-06-01 11:48:18
Last updated
2026-10-15 02:18:31

Antivirus detections

EngineDetection
ALYacTrojan.GenericKD.80264495
AVGOther:Malware-gen [Trj]
Antiy-AVLTrojan/Script.SAgent
ArcabitTrojan.Generic.D4C8BD2F
AvastOther:Malware-gen [Trj]
AviraTR/Malware
BitDefenderTrojan.GenericKD.80264495
CTXjavascript.trojan.cloudeye
CynetMalicious (score: 99)
ESET-NOD32PowerShell/CloudEye.GM trojan
EmsisoftTrojan.GenericKD.80264495 (B)
F-SecureTrojan.TR/Malware
FortinetJS/Agent.17C9!tr
GDataScript.Trojan.Agent.3OG9EG
GoogleDetected
IkarusTrojan-Downloader.JS.Agent
KasperskyHEUR:Trojan.Script.SAgent.gen
LionicTrojan.Script.SAgent.4!c
MicroWorld-eScanTrojan.GenericKD.80264495
MicrosoftTrojan:JS/GuLoader.RBL!MTB
SymantecScr.Guloader!gen3
TencentScript.Trojan.Sagent.Imnw
VIPRETrojan.GenericKD.80264495
VaristABTrojan.XIRF-
VirITTrojan.JS.Agent.DPU
YandexTrojan.Etecer.b6EqyK.4
alibabacloudTrojan:Win/CloudEye.GZ
ALYacJS:Trojan.CloudEye.5
ArcabitJS:Trojan.CloudEye.5
BitDefenderJS:Trojan.CloudEye.5
CTXjavascript.trojan.sagent
DrWebJS.DownLoader.10532
EmsisoftJS:Trojan.CloudEye.5 (B)
GDataJS:Trojan.CloudEye.5
K7GWRiskware ( 009b89e81 )
McAfeeDTrojan:Script/AgentTesla.LF!1
MicroWorld-eScanJS:Trojan.CloudEye.5
RisingTrojan.Obfus/JS!1.13F89 (CLASSIC)
SophosMal/JSGuLdr-A
VIPREJS:Trojan.CloudEye.5
ZoneAlarmMal/JSGuLdr-A
huorongTrojan/PS.Obfuscated.ac