USPS Delivery Note.exe
Classification: Malicious
USPS Delivery Note.exe is a trojan (application/x-dosexec). Detected by 68 antivirus engines. Linked to Raccoon Stealer malware.
Detection summary
- 68 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: RACCOON STEALER (S1148)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| RaccoonStealer | Abuse.ch | 2021-09-29 14:46:48 | 2021-09-29 14:46:48 | malicious-activity | S1148 Raccoon Stealer |
Sample information
- Filenames
- USPS Delivery Note.exe
- File type
- application/x-dosexec
- MD5
cb566599a0870dbfc044de928ef03d41- SHA-1
941621766be5a943b27c246928cf93aa2f7fb765- SHA-256
7b4950be4d148582cc679bf06706c1828aaeda0ee0f62005d6bbb78441326517- First indexed
- 2021-09-29 16:15:08
- Last updated
- 2026-10-12 02:31:15
Antivirus detections
| Engine | Detection |
|---|---|
| Lionic | Trojan.Win32.Generic.4!c |
| Elastic | malicious (high confidence) |
| McAfee | RDN/Generic.com |
| Cylance | Unsafe |
| Sangfor | Suspicious.Win32.Save.a |
| BitDefender | Trojan.GenericKD.47075474 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cyren | W32/MSIL_Kryptik.EHH.gen!Eldorado |
| Symantec | ML.Attribute.HighConfidence |
| ESET-NOD32 | a variant of MSIL/TrojanDownloader.Agent_AGen.Z |
| APEX | Malicious |
| Paloalto | generic.ml |
| Kaspersky | HEUR:Trojan.MSIL.PowerShell.gen |
| Avast | Win32:Trojan-gen |
| DrWeb | Trojan.Inject4.16725 |
| McAfee-GW-Edition | Artemis!Trojan |
| FireEye | Generic.mg.cb566599a0870dbf |
| Sophos | Mal/Generic-R |
| SentinelOne | Static AI - Malicious PE |
| Webroot | W32.Trojan.Gen |
| Kingsoft | Win32.Troj.Undef.(kcloud) |
| Microsoft | Trojan:MSIL/AgentTesla.RV!MTB |
| ZoneAlarm | HEUR:Trojan.MSIL.PowerShell.gen |
| GData | Trojan.GenericKD.47075474 |
| Malwarebytes | Trojan.Downloader.MSIL.Generic |
| Fortinet | W32/Malicious_Behavior.VEX |
| BitDefenderTheta | Gen:NN.ZemsilF.34170.om0@aGSU8opi |
| AVG | Win32:Trojan-gen |
| McAfee | Artemis!CB566599A087 |
| Sophos | ML/PE-A |
| eGambit | Unsafe.AI_Score_91% |
| Cybereason | malicious.66be5a |
| ALYac | Trojan.GenericKD.47075474 |
| AhnLab-V3 | Trojan/Win.Generic.C4662706 |
| Alibaba | Trojan:MSIL/AgentTesla.12c5c877 |
| Antiy-AVL | Trojan/MSIL.PowerShell |
| Arcabit | Trojan.Generic.D2CE5092 |
| BitDefenderTheta | Gen:NN.ZemsilF.36792.om0@aGSU8opi |
| CAT-QuickHeal | Trojan.MsilFC.S24737247 |
| Cylance | unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | a variant of MSIL/TrojanDownloader.Agent.IXQ |
| Emsisoft | Trojan.GenericKD.47075474 (B) |
| Fortinet | MSIL/Agent.IXK!tr.dldr |
| Detected | |
| Gridinsoft | Trojan.Win32.Downloader.oa!s1 |
| Ikarus | Trojan-Downloader.MSIL.Agent |
| Jiangmin | Trojan.MSIL.aiohs |
| K7AntiVirus | Trojan-Downloader ( 005884011 ) |
| K7GW | Trojan-Downloader ( 005884011 ) |
| MAX | malware (ai score=83) |
| McAfee | Generic .qh |
| MicroWorld-eScan | Trojan.GenericKD.47075474 |
| Microsoft | Trojan:MSIL/RacoonStealer.PA!MTB |
| Panda | Trj/CI.A |
| Rising | Malware.Obfus/[email protected] (RDM.MSIL2:oRaHc4yGFGkmh5kyJw/kKg) |
| Skyhigh | BehavesLike.Win32.AgentTesla.dh |
| Sophos | Mal/Generic-S |
| Tencent | Malware.Win32.Gencirc.115ceb28 |
| Trapmine | suspicious.low.ml.score |
| VBA32 | Trojan.MSIL.PowerShell |
| VIPRE | Trojan.GenericKD.47075474 |
| Varist | W32/MSIL_Kryptik.EHH.gen!Eldorado |
| VirIT | Trojan.Win32.MSIL_Heur.A |
| Xcitium | Malware@#3imzbhhuc340h |
| Yandex | Trojan.PowerShell!tuXoLV2tb88 |
| Zillya | Trojan.PowerShell.Win32.728 |