IM-87678A-1A.msi

Classification: Malicious

IM-87678A-1A.msi is a malicious file sample. Linked to Metamorfo malware. Reported by 1 threat source, last seen 2022-02-09. Detected by 31 antivirus engines.

Detection summary

  • 31 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: METAMORFO (S0455)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Metamorfo MalwareBazaar Abuse.ch 2022-02-09 03:53:20 2022-02-09 03:53:20 malicious-activity S0455 Metamorfo
Generic.Malware MalwareBazaar Abuse.ch 2022-02-09 03:53:20 2022-02-09 03:53:20 malicious-activity

Sample information

Filenames
IM-87678A-1A.msi
File type
application/x-msi
MD5
31926fdcac41cb5aae17a0e57783c4a2
SHA-1
430e76c1026b26aee531394779d955246eb9bbe3
SHA-256
443810cbc6e3b61583f0161e03aff00d9d1c32c020ec41be13de3772209c120c
First indexed
2022-02-09 04:15:04
Last updated
2026-04-26 05:35:21

Antivirus detections

EngineDetection
FireEyeExploit.HTML-Downloader.Gen
CyrenW32/Trojan.ZYBO-7004
ESET-NOD32JS/TrojanDownloader.Agent.TXV
KasperskyHEUR:Trojan-Downloader.Script.SLoad.gen
BitDefenderExploit.HTML-Downloader.Gen
EmsisoftExploit.HTML-Downloader.Gen (B)
GDataExploit.HTML-Downloader.Gen
JiangminTrojan.Generic.dmckm
ZoneAlarmHEUR:Trojan-Downloader.Script.SLoad.gen
ALYacExploit.HTML-Downloader.Gen
MAXmalware (ai score=81)
ALYacTrojan.GenericKD.38931990
AVGJS:Dropper-AAEX [Drp]
ArcabitTrojan.Generic.D2520E16
AvastJS:Dropper-AAEX [Drp]
AviraJS/Dldr.Agent.qahkw
BitDefenderTrojan.GenericKD.38931990
CynetMalicious (score: 99)
EmsisoftTrojan.GenericKD.38931990 (B)
F-SecureMalware.JS/Dldr.Agent.qahkw
FireEyeTrojan.GenericKD.38931990
GDataTrojan.GenericKD.38931990
GoogleDetected
LionicTrojan.Script.SLoad.a!c
MicroWorld-eScanTrojan.GenericKD.38931990
SkyhighArtemis!Trojan
SymantecTrojan.Gen.2
TencentJs.Trojan-Downloader.Er.Ymhl
VIPRETrojan.GenericKD.38931990
VaristJS/Downldr.RT!Eldorado
XcitiumMalware@#22hws4ooyvujo