VGAGvKd.msi

Classification: Malicious

VGAGvKd.msi is a malicious file sample (Office document). Linked to Tsundere Botnet malware. 7 sightings, last seen 2026-06-04.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 2 contacted hosts
  • 3 DNS requests

MITRE ATT&CK associations

Malware families: TSUNDERE BOTNET (S9034)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Dindoor Triage 2026-03-16 19:48:26 2026-06-04 20:47:48 malicious-activity S9034 Tsundere Botnet
Generic Malware Hybrid-Analysis 2026-03-16 20:45:06 2026-03-16 20:45:06

Tags

dindoor backdoor credential_access defense_evasion execution persistence privilege_escalation ransomware rat spyware stealer trojan

Sample information

Filenames
1480dabe89af53f798ac93d4606d37ad8a1e6938dc054460ed4d8548f5e18d70, VGAGvKd.msi, 1480dabe89af53f798ac93d4606d37ad8a1e6938dc054460ed4d8548f5e18d70.bin, _1480dabe89af53f798ac93d4606d37ad8a1e6938dc054460ed4d8548f5e18d70.fpx
File type
Composite Document File V2 Document, Little Endian ...
MD5
0574d4b7b42c39b918d0d58d149c9438
SHA-1
d5a64154219b788c056f388810ea5c67b0474569
SHA-256
1480dabe89af53f798ac93d4606d37ad8a1e6938dc054460ed4d8548f5e18d70
SHA-512
9fff5c8860038991acbfcdeeba4e571ea468f05d5587944b8afcb3b2ba34c2b9069bca03ed2f37a22d9bc3b1e58ce15e39d29ea4adbd93ff8993e7e996e8c082
First indexed
2026-03-16 19:48:26
Last updated
2026-08-27 12:43:22

Network contacts

69.67.170.170 104.21.58.22

DNS requests

deno.com deno.land dl.deno.land