KawaiiCraftLauncher Setup.msi
Classification: Malicious
KawaiiCraftLauncher Setup.msi is a trojan (Office document). Detected by 9 antivirus engines. Linked to Jhuhugit, Komplex malware.
Detection summary
- 9 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: JHUHUGIT (S0044) KOMPLEX (S0162)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-05-24 10:45:03 | 2026-05-24 10:45:03 | ||
| Seduploader | MalwareBazaar Abuse.ch | 2026-05-24 10:23:58 | 2026-05-24 10:23:58 | malicious-activity | S0044 JHUHUGIT S0162 Komplex |
Sample information
- Filenames
- KawaiiCraftLauncher Setup.msi, dced47b33a24b11f24aac4d6fe4c8f606aac0bf3d985b5dae819f083c809498d.bin
- File type
- Composite Document File V2 Document, Little Endian ...
- MD5
b3b164b195175db373b713457403d51f- SHA-1
4dc8cd93aa0e555247c282aaee6fcef86d8375ae- SHA-256
dced47b33a24b11f24aac4d6fe4c8f606aac0bf3d985b5dae819f083c809498d- First indexed
- 2026-05-24 10:23:58
- Last updated
- 2026-09-10 02:27:15
Antivirus detections
| Engine | Detection |
|---|---|
| Avira | TR/Malware |
| Cynet | Malicious (score: 99) |
| ESET-NOD32 | JS/Spy.Agent.WS trojan |
| F-Secure | Trojan.TR/Malware |
| Detected | |
| Microsoft | Trojan:Win32/Qwexlafiba!rfn |
| Symantec | Trojan.Gen.MBT |
| Varist | ABTrojan.RBKI- |
| alibabacloud | Trojan[dropper]:Javascript/Qwexlafiba.Gen |