z32BOLET0120923(1).msi
Classification: Malicious
z32BOLET0120923(1).msi is a downloader (Windows installer). Detected by 14 antivirus engines. Linked to Metamorfo malware.
Detection summary
- 14 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: METAMORFO (S0455)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Metamorfo | MalwareBazaar Abuse.ch | 2023-09-12 19:02:04 | 2023-09-12 19:02:04 | malicious-activity | S0455 Metamorfo |
Sample information
- Filenames
- z32BOLET0120923(1).msi
- File type
- application/x-msi
- MD5
0fde8516a3f519ff250a0571ea0c1b68- SHA-1
12410d6f88525bc5c11ce4e009053c04e42bf452- SHA-256
439fba17d37f5fb43487decfd1743712861fc0067d98ff4171d41ca5a267648a- First indexed
- 2023-09-12 19:38:09
- Last updated
- 2024-09-20 18:09:22
Antivirus detections
| Engine | Detection |
|---|---|
| MicroWorld-eScan | Exploit.HTML-Downloader.Gen |
| FireEye | Exploit.HTML-Downloader.Gen |
| ALYac | Exploit.HTML-Downloader.Gen |
| ESET-NOD32 | JS/TrojanDownloader.Agent.UKK |
| Kaspersky | HEUR:Trojan-Downloader.Script.SLoad.gen |
| BitDefender | Exploit.HTML-Downloader.Gen |
| VIPRE | Exploit.HTML-Downloader.Gen |
| Emsisoft | Exploit.HTML-Downloader.Gen (B) |
| GData | Exploit.HTML-Downloader.Gen |
| Arcabit | Exploit.HTML-Downloader.Gen |
| ZoneAlarm | HEUR:Trojan-Downloader.Script.SLoad.gen |
| Detected | |
| MAX | malware (ai score=87) |
| Fortinet | VBS/Agent.RWZ!tr.dldr |