BOLET0_120923__1_.msi
Classification: Malicious
BOLET0_120923__1_.msi is a downloader (Windows installer). Detected by 42 antivirus engines. Linked to Metamorfo malware.
Detection summary
- 42 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: METAMORFO (S0455)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Cyber Threat Alliance | 2026-08-09 10:16:15 | 2026-08-09 10:16:15 | malicious-activity | |
| Metamorfo | MalwareBazaar Abuse.ch | 2023-09-12 11:58:44 | 2023-09-12 11:58:44 | malicious-activity | S0455 Metamorfo |
Sample information
- Filenames
- BOLET0_120923__1_.msi
- File type
- application/x-msi
- MD5
7783f8ce97081ab632b2f2d085b28ec1- SHA-1
6edbcbb07805bedab56c8185659c498ff5e3513e- SHA-256
cf20aca104aa5a2a011cc6bce77d529d7c2d596185b41863e5dfbd0a0163f086- First indexed
- 2023-09-12 12:38:02
- Last updated
- 2026-08-03 00:17:48
Antivirus detections
| Engine | Detection |
|---|---|
| VIPRE | Exploit.HTML-Downloader.Gen |
| ESET-NOD32 | JS/TrojanDownloader.Agent.UKK |
| Kaspersky | HEUR:Trojan-Downloader.Script.SLoad.gen |
| BitDefender | Exploit.HTML-Downloader.Gen |
| MicroWorld-eScan | Exploit.HTML-Downloader.Gen |
| Emsisoft | Exploit.HTML-Downloader.Gen (B) |
| FireEye | Exploit.HTML-Downloader.Gen |
| GData | Exploit.HTML-Downloader.Gen |
| MAX | malware (ai score=89) |
| Arcabit | Exploit.HTML-Downloader.Gen |
| ZoneAlarm | HEUR:Trojan-Downloader.Script.SLoad.gen |
| Microsoft | Trojan:Script/Wacatac.B!ml |
| ALYac | Exploit.HTML-Downloader.Gen |
| Fortinet | VBS/Agent.RWZ!tr.dldr |
| ALYac | Trojan.GenericKD.69240116 |
| AVG | Other:Malware-gen [Trj] |
| Antiy-AVL | Trojan[Downloader]/JS.Agent |
| Arcabit | Trojan.Generic.D4208534 |
| Avast | Other:Malware-gen [Trj] |
| Avira | JS/Dldr.Agent.nclrk |
| BitDefender | Trojan.GenericKD.69240116 |
| Cynet | Malicious (score: 99) |
| DrWeb | Trojan.DownLoader46.5125 |
| Emsisoft | Trojan.GenericKD.69240116 (B) |
| F-Secure | Malware.JS/Dldr.Agent.nclrk |
| FireEye | Trojan.GenericKD.69240116 |
| GData | Trojan.GenericKD.69240116 |
| Detected | |
| Ikarus | Trojan-Downloader.JS.Agent |
| Kaspersky | UDS:DangerousObject.Multi.Generic |
| Kingsoft | Win32.Troj.Unknown.a |
| Lionic | Trojan.Win32.Generic.4!c |
| MicroWorld-eScan | Trojan.GenericKD.69240116 |
| Microsoft | Trojan:Win32/Synder!ic |
| Symantec | Trojan.Gen.MBT |
| Tencent | Js.Trojan-Downloader.Er.Ocnw |
| TrendMicro | TROJ_FRS.0NA104ID23 |
| TrendMicro-HouseCall | TROJ_FRS.0NA104ID23 |
| VIPRE | Trojan.GenericKD.69240116 |
| Varist | VBS/Agent.BDM |
| VirIT | Trojan.MSI.Agent.BJC |
| Yandex | Trojan.Mofer.b0Qgjl.24 |