SpravkiBKsetup_ver._2.5.msi
Classification: Malicious
SpravkiBKsetup_ver._2.5.msi is a trojan (Windows installer). Detected by 49 antivirus engines. Linked to Konni malware.
Detection summary
- 49 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: KONNI (S0356)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Konni | MalwareBazaar Abuse.ch | 2024-06-05 10:57:05 | 2024-06-05 10:57:05 | malicious-activity | S0356 KONNI |
Sample information
- Filenames
- SpravkiBKsetup_ver._2.5.msi
- File type
- application/x-msi
- MD5
78b3290a93de62116e083eb7c9b93b22- SHA-1
f1b87a285d1123dbdc40c76d30aecec92a21c99e- SHA-256
62b0e3ab7d2f1e15de5652ab6f3af50036f71e7a19baaedfdef0db49c7436cae- First indexed
- 2024-06-05 12:20:38
- Last updated
- 2026-08-21 01:25:32
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Backdoor.Agent.status |
| AVG | Win64:TrojanX-gen [Trj] |
| Antiy-AVL | GrayWare/Win32.Wacapew |
| Arcabit | Trojan.Generic.D428A267 |
| Avast | Win64:TrojanX-gen [Trj] |
| BitDefender | Trojan.GenericKD.69771879 |
| DrWeb | BackDoor.Konni.4 |
| ESET-NOD32 | multiple detections |
| Emsisoft | Trojan.GenericKD.69771879 (B) |
| F-Secure | Trojan.TR/Agent.nttbz |
| FireEye | Trojan.GenericKD.69771879 |
| Fortinet | Adware/Agent |
| GData | Trojan.GenericKD.69771879 |
| Detected | |
| Ikarus | Trojan.Win64.Agent |
| K7AntiVirus | Trojan ( 00597ce51 ) |
| K7GW | Trojan ( 00597ce51 ) |
| Kaspersky | Trojan.Win64.Konni.cw |
| Lionic | Trojan.Win32.Konni.4!c |
| MAX | malware (ai score=85) |
| McAfee | Artemis!B42D99E209F6 |
| MicroWorld-eScan | Trojan.GenericKD.69771879 |
| Microsoft | Program:Win32/Wacapew.C!ml |
| NANO-Antivirus | Trojan.Win64.Konni.kmmpcf |
| Rising | [email protected] (RDML:3Bvw79sh9sK6yF68orrjtQ) |
| Skyhigh | Artemis!Trojan |
| Sophos | Mal/Generic-S |
| Symantec | Trojan.Gen.MBT |
| Tencent | Win64.Trojan.Konni.Ogil |
| TrendMicro | TROJ_GEN.R002C0XC724 |
| TrendMicro-HouseCall | TROJ_GEN.R002H0CE624 |
| VIPRE | Trojan.GenericKD.69771879 |
| Varist | W64/ABRisk.DSJO-1676 |
| Zillya | Trojan.Agent.Win64.46339 |
| ZoneAlarm | Trojan.Win64.Konni.cw |
| CTX | msi.trojan.konni |
| ESET-NOD32 | Win64/Agent.ATC trojan |
| K7AntiVirus | Trojan ( 005eb6041 ) |
| K7GW | Trojan ( 005eb6041 ) |
| Rising | Backdoor.[APT37]Agent!1.FCEE (CLASSIC) |
| SentinelOne | Static AI - Malicious MSI |
| Symantec | Trojan Horse |
| TrellixENS | Artemis!B42D99E209F6 |
| TrendMicro | TROJ_FRS.0NA103F624 |
| TrendMicro-HouseCall | TROJ_FRS.0NA103F624 |
| Varist | W64/ABTrojan.DSJO-1676 |
| VirIT | Trojan.MSI.Agent.GVD |
| Xcitium | Malware@#2pukql0ry1blo |
| alibabacloud | Trojan:Win/Multiverze.Gen |