BIK1910486_20260615.js
Classification: Malicious
BIK1910486_20260615.js is a trojan (ASCII text). Detected by 31 antivirus engines. Linked to Guloader malware.
Detection summary
- 31 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 9 contacted hosts
- 11 DNS requests
MITRE ATT&CK associations
Malware families: GULOADER (S0561)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-06-15 21:45:05 | 2026-06-15 21:45:05 | malicious-activity | |
| GuLoader | MalwareBazaar Abuse.ch | 2026-06-15 20:30:44 | 2026-06-15 20:30:44 | malicious-activity | S0561 GuLoader |
Sample information
- Filenames
- e0fc11c55c5269e1b2c12b824b8c18b8e6697f868253d072e5b82dde1c26ee03.bin, BIK1910486_20260615.js
- File type
- ASCII text, with very long lines (589), with CRLF ...
- MD5
25ada1dd05e499600ccdd4df0d6f9497- SHA-1
c50916b0c1e5bf3c9a6d0a2bc7dabd6730ae3529- SHA-256
e0fc11c55c5269e1b2c12b824b8c18b8e6697f868253d072e5b82dde1c26ee03- First indexed
- 2026-06-15 20:30:44
- Last updated
- 2026-10-16 05:47:48
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | JS:Trojan.AgentTesla.1418 |
| AVG | Other:Malware-gen [Trj] |
| Antiy-AVL | Trojan/Script.SAgent |
| Arcabit | JS:Trojan.AgentTesla.D58A |
| Avast | Other:Malware-gen [Trj] |
| Avira | TR/Malware |
| BitDefender | JS:Trojan.AgentTesla.1418 |
| CTX | javascript.trojan.guloader |
| Cynet | Malicious (score: 99) |
| DrWeb | JS.DownLoader.10532 |
| ESET-NOD32 | JS/TrojanDropper.Agent.QED trojan |
| Emsisoft | JS:Trojan.AgentTesla.1418 (B) |
| F-Secure | Trojan.TR/Malware |
| GData | JS:Trojan.AgentTesla.1418 |
| Detected | |
| Ikarus | Trojan.JS.Agent |
| K7GW | Riskware ( 009b89e81 ) |
| Kaspersky | HEUR:Trojan.Script.SAgent.gen |
| Lionic | Trojan.Script.GuLoader.4!c |
| McAfeeD | Trojan:Script/JSDownloader.LY |
| MicroWorld-eScan | JS:Trojan.AgentTesla.1418 |
| Microsoft | Trojan:JS/GuLoader.RBS!MTB |
| Rising | Dropper.Agent/JS!8.126A2 (TOPIS:E0:bxJiMtabKTK) |
| Symantec | Trojan.Gen.NPE.P |
| Tencent | Script.Trojan.Sagent.Msmw |
| VIPRE | JS:Trojan.AgentTesla.1418 |
| Varist | JS/Agent.EMD |
| VirIT | Trojan.JS.Agent.JUL |
| Xcitium | Malware@#4el6oq4v7mm0 |
| alibabacloud | Trojan[dropper]:Javascript/GuLoader.RKK2XJC |
| huorong | TrojanDropper/JS.Agent.cw |
Network contacts
31.14.23.249 99.84.160.10 151.101.129.44 104.18.41.41 104.254.151.60 150.171.109.65 150.171.109.74 142.251.41.74 23.32.45.43
DNS requests
bgmotors.ro deff.nelreports.net edge-consumer-static.azureedge.net edgeassetservice.azureedge.net ib.adnxs.com m.adnxs.com px.ads.linkedin.com r.msftstatic.com sb.scorecardresearch.com trc.taboola.com www.googleapis.com