Installer_v1.21.66.msi

Classification: Malicious

Installer_v1.21.66.msi is a malicious file sample. Linked to Tsundere Botnet malware. Reported by 2 threat sources, last seen 2026-03-19.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 2 contacted hosts
  • 3 DNS requests

MITRE ATT&CK associations

Malware families: TSUNDERE BOTNET (S9034)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Triage 2026-02-25 00:27:26 2026-03-19 11:25:20 malicious-activity
Dindoor Triage 2026-03-12 20:13:33 2026-03-19 10:32:39 malicious-activity S9034 Tsundere Botnet
Generic Malware Hybrid-Analysis 2026-02-25 00:45:07 2026-02-25 00:45:07

Tags

execution persistence privilege_escalation ransomware spyware stealer dindoor backdoor rat trojan revoked_codesign

Sample information

Filenames
Installer_v1.21.66.msi, 2a09bbb3d1ddb729ea7591f197b5955453aa3769c6fb98a5ef60c6e4b7df23a5.msi, 2a09bbb3d1ddb729ea7591f197b5955453aa3769c6fb98a5ef60c6e4b7df23a5.bin
File type
Composite Document File V2 Document, Little Endian ...
MD5
5c057af2f358fc10107d5ccdb39938ad
SHA-1
e2e8516b4f275e8c636620b7377ee3b9f9f47bb0
SHA-256
2a09bbb3d1ddb729ea7591f197b5955453aa3769c6fb98a5ef60c6e4b7df23a5
SHA-512
c5f0e6e1f69b686c8ffbb950c2b0120232b929df33c1041a392e14220cc29604befc23e19a06234c0594ae2eb00c747e56117298de50940b4a20b9f329a58cfb
First indexed
2026-02-25 00:27:26
Last updated
2026-07-18 19:29:55

Network contacts

69.67.170.170 34.160.51.190

DNS requests

deno.com deno.land dl.deno.land