sk.msi

Classification: Malicious

sk.msi is a malicious file sample. Linked to Bitter activity. Reported by 1 threat source, last seen 2022-05-13. Detected by 70 antivirus engines.

Detection summary

  • 70 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: BITTER (G1002)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Bitter MalwareBazaar Abuse.ch 2022-05-13 08:17:34 2022-05-13 08:17:34 malicious-activity G1002 BITTER
Generic.Malware MalwareBazaar Abuse.ch 2022-05-13 08:17:34 2022-05-13 08:17:34 malicious-activity

Sample information

Filenames
sk.msi
File type
application/x-msi
MD5
deaeaca791f20ffd641cf287c261ec00
SHA-1
073876cbfc4ed949dd3ae5b8c4ed7a63ca66461c
SHA-256
a9362d0dd4cdd64c855333e0fd113421887be498a99b4044ceaf64207b41b196
First indexed
2022-05-13 09:15:03
Last updated
2026-03-26 05:21:27

Antivirus detections

EngineDetection
LionicTrojan.Win32.Agentb.4!c
CynetMalicious (score: 99)
McAfeeGenericRXRG-DG!2C8ED4045B76
SangforTrojan.Win32.Agentb.gen
K7AntiVirusTrojan-Downloader ( 0058c3871 )
K7GWTrojan ( 005916701 )
CyrenW32/Trojan.POZB-6025
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/TrojanDownloader.Small.BJH
TrendMicro-HouseCallTROJ_GEN.R002C0PCD22
AvastWin32:Trojan-gen
ClamAVWin.Downloader.ZxxZ-9944378-0
KasperskyHEUR:Trojan.Win32.Agentb.gen
BitDefenderGen:Variant.Doina.23073
MicroWorld-eScanGen:Variant.Doina.23073
RisingDownloader.[Bitter]Agent!1.DDC7 (CLOUD)
EmsisoftGen:Variant.Doina.23073 (B)
ZillyaDownloader.Small.Win32.144041
TrendMicroTROJ_GEN.R002C0PCD22
McAfee-GW-EditionGenericRXRG-DG!2C8ED4045B76
FireEyeGen:Variant.Doina.23073
SophosMal/Generic-S
GDataGen:Variant.Doina.23073
AviraTR/Dldr.Small.orcvr
MAXmalware (ai score=84)
ArcabitTrojan.Doina.D5A21
MicrosoftTrojanDownloader:Win32/FraudLoad.AN!MTB
VBA32BScope.Trojan.Agent
ALYacTrojan.Downloader.Small
TencentWin32.Trojan.Agentb.Wvkw
IkarusTrojan-Downloader.Win32.Small
FortinetW32/Small.BJH!tr
BitDefenderThetaGen:NN.ZexaF.34666.du0@aqIYQAii
AVGWin32:Trojan-gen
CAT-QuickHealOle.Trojan.A5583443
McAfeeRDN/Generic Downloader.x
K7AntiVirusTrojan ( 005916701 )
BitDefenderTrojan.GenericKD.49018156
MicroWorld-eScanTrojan.GenericKD.49018156
Ad-AwareTrojan.GenericKD.49018156
FireEyeTrojan.GenericKD.49018156
EmsisoftTrojan.GenericKD.49018156 (B)
GDataTrojan.GenericKD.49018156
KingsoftWin32.Troj.Undef.(kcloud)
ZoneAlarmHEUR:Trojan.Win32.Agentb.gen
RisingDownloader.[Bitter]Agent!1.DDC7 (CLASSIC)
Antiy-AVLTrojan[APT]/Win32.Bitter
ArcabitTrojan.Generic.D2471D95
AviraHEUR/AGEN.1375166
BitDefenderTrojan.Generic.38215061
CAT-QuickHealTrojan.Ghanarava.17329433554b65ec
CTXmsi.trojan.small
DrWebTrojan.DownLoad4.14844
EmsisoftTrojan.Generic.38215061 (B)
F-SecureHeuristic.HEUR/AGEN.1375166
GDataTrojan.Generic.38215061
GoogleDetected
KasperskyUDS:DangerousObject.Multi.Generic
LionicTrojan.Win32.Bitter.4!c
MicroWorld-eScanTrojan.Generic.38215061
SangforTrojan.Win32.Bitter.IOC
SkyhighRDN/Generic Downloader.x
TencentMalware.Win32.Gencirc.11c70982
TrellixENSRDN/Generic Downloader.x
TrendMicroTrojan.Win32.SMALL.VSNW1DA24
TrendMicro-HouseCallTrojan.Win32.SMALL.VSNW1DA24
VIPRETrojan.Generic.38215061
VaristW32/Trojan.JLJI-4516
XcitiumMalware@#1abj9ma5hlf1g
alibabacloudTrojan[Downloader]:Win/Agent!AGF.BDXC