5d195c6a7de59b6bfa2b40f625ff7b3dede3c06a5644aa0de3f341d4ba26b582
Classification: Malicious
5d195c6a7de59b6bfa2b40f625ff7b3dede3c06a5644aa0de3f341d4ba26b582 is a trojan (Windows installer). Detected by 26 antivirus engines.
Detection summary
- 26 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: METAMORFO (S0455)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Metamorfo | MalwareBazaar Abuse.ch | 2022-02-10 05:48:02 | 2022-02-10 05:48:02 | malicious-activity | S0455 Metamorfo |
Sample information
- Filenames
- cd5dbada75f47ea26cf666871c03c0b5.msi
- File type
- application/x-msi
- MD5
cd5dbada75f47ea26cf666871c03c0b5- SHA-1
8480d2d93d2335e32b4dcc0de81b0bf9e8489ee6- SHA-256
5d195c6a7de59b6bfa2b40f625ff7b3dede3c06a5644aa0de3f341d4ba26b582- First indexed
- 2022-02-10 07:15:11
- Last updated
- 2025-09-29 01:40:19
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.GenericKD.48314252 |
| AVG | JS:Dropper-AAEX [Drp] |
| Arcabit | Trojan.Generic.D2E1378C |
| Avast | JS:Dropper-AAEX [Drp] |
| Avira | JS/Dldr.Agent.yknpq |
| BitDefender | Trojan.GenericKD.48314252 |
| Cynet | Malicious (score: 99) |
| ESET-NOD32 | JS/TrojanDownloader.Agent.TXV |
| Emsisoft | Trojan.GenericKD.48314252 (B) |
| F-Secure | Malware.JS/Dldr.Agent.yknpq |
| FireEye | Trojan.GenericKD.48314252 |
| Fortinet | JS/Agent.TXV!tr.dldr |
| GData | Trojan.GenericKD.48314252 |
| Detected | |
| Jiangmin | Trojan.Generic.dmckm |
| Kaspersky | HEUR:Trojan-Downloader.Script.SLoad.gen |
| Lionic | Trojan.Win32.SLoad.a!c |
| MAX | malware (ai score=81) |
| MicroWorld-eScan | Trojan.GenericKD.48314252 |
| Skyhigh | Artemis |
| Symantec | Trojan.Gen.2 |
| Tencent | Js.Trojan-Downloader.Er.Iajl |
| VIPRE | Trojan.GenericKD.48314252 |
| Varist | JS/Downldr.RT!Eldorado |
| ZoneAlarm | HEUR:Trojan-Downloader.Script.SLoad.gen |
| alibabacloud | Trojan[downloader]:Javascript/SLoad.gyf |