IM-vL5WWvBl.msi

Classification: Malicious

IM-vL5WWvBl.msi is a malicious file sample. Linked to Metamorfo malware. Reported by 1 threat source, last seen 2022-03-18. Detected by 27 antivirus engines.

Detection summary

  • 27 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: METAMORFO (S0455)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Metamorfo MalwareBazaar Abuse.ch 2022-03-18 14:35:06 2022-03-18 14:35:06 malicious-activity S0455 Metamorfo
Generic.Malware MalwareBazaar Abuse.ch 2022-03-18 14:35:06 2022-03-18 14:35:06 malicious-activity

Sample information

Filenames
IM-vL5WWvBl.msi
File type
application/x-msi
MD5
b374d94b1056b98d603ebe65913fe349
SHA-1
d9dfe18a29de5948845f135f45844bd68658b945
SHA-256
614c970bb776bad75d7b79488a591a5a9954cfd3835817246ce544ddb4a1fd83
First indexed
2022-03-18 15:15:04
Last updated
2025-12-06 00:16:18

Antivirus detections

EngineDetection
ALYacTrojan.GenericKD.39282366
AVGWin32:Agent-BCYT [Drp]
Ad-AwareTrojan.GenericKD.39282366
ArcabitTrojan.Generic.D25766BE
AvastWin32:Agent-BCYT [Drp]
AviraTR/Agent.thoku
BitDefenderTrojan.GenericKD.39282366
CynetMalicious (score: 99)
ESET-NOD32a variant of Win32/Spy.Ousaban.B
EmsisoftTrojan.GenericKD.39282366 (B)
FireEyeTrojan.GenericKD.39282366
FortinetW32/Numando.AL!tr
GDataTrojan.GenericKD.39282366
IkarusTrojan-Spy.Agent
K7AntiVirusSpyware ( 0057394a1 )
KasperskyUDS:Trojan-Banker.Win32.Javali.gen
MAXmalware (ai score=85)
McAfeeArtemis!E39592C0B83C
McAfee-GW-EditionArtemis!Trojan
MicroWorld-eScanTrojan.GenericKD.39282366
MicrosoftTrojan:Win32/Wacatac.B!ml
RisingSpyware.Ousaban!8.11EBD (CLOUD)
SophosMal/Generic-S
TencentWin32.Trojan-spy.Ousaban.Pefk
TrendMicro-HouseCallTROJ_GEN.R002H0CCG22
VBA32TScope.Trojan.Delf
ZoneAlarmHEUR:Trojan-Banker.Win32.Javali.gen