JS/Agent.9C84!tr.dldr

description-logoAnalysis



JS/Agent.9C84!tr.dldr is a detection for a JS Downloader Trojan.
Below are some of the observed characteristics/behaviours for this infection:

  • This malicious JS may download from hxxp://dinamit9{Removed}.ru/wp-content/themes/ritz/iuhygfde_2017-11-24_20-38.exe. afterwhich executes it. However during the time of our tests this locations has been removed/offlined.



recommended-action-logoRecommended Action

  • Make sure that your FortiGate/FortiClient system is using the latest AV database.
  • Quarantine/delete files that are detected and replace infected files with clean backup copies.

Telemetry logoTelemetry

Detection Availability

FortiClient
Extreme
FortiMail
Extreme
FortiSandbox
Extreme
FortiWeb
Extreme
Web Application Firewall
Extreme
FortiIsolator
Extreme
FortiDeceptor
Extreme
FortiEDR

Version Updates

Date Version Detail
2020-03-04 75.71900 Sig Updated