BL-Draft_Loading-Shipment.exe

Classification: Malicious

BL-Draft_Loading-Shipment.exe is a trojan (Windows executable). Detected by 37 antivirus engines. Linked to Darktortilla malware.

Detection summary

  • 37 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: DARKTORTILLA (S1066)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-06-30 09:45:04 2026-06-30 09:45:04 malicious-activity
DarkTortilla MalwareBazaar Abuse.ch 2026-06-30 09:27:09 2026-06-30 09:27:09 malicious-activity S1066 DarkTortilla

Tags

evasive

Sample information

Filenames
BL-Draft_Loading-Shipment.exe, a1271b9b50b806efd698e97d443f341e4921a906ea48d22002ba84a91f89df6e.bin
File type
PE32 executable for MS Windows 4.00 (GUI), Intel i ...
MD5
a5983cfdbfe5f8d9239d376f45d25681
SHA-1
f39c83b0e96faf8d3ee832a00323b5a2fb422970
SHA-256
a1271b9b50b806efd698e97d443f341e4921a906ea48d22002ba84a91f89df6e
First indexed
2026-06-30 09:27:09
Last updated
2026-09-20 06:37:09

Antivirus detections

EngineDetection
ALYacGen:Variant.msilheracles.93901
APEXMalicious
AVGMalwareX-gen [Cryp]
AlibabaTrojan:MSIL/Kryptik.496fe7c8
ArcabitTrojan.msilheracles.D16ECD
AvastMalwareX-gen [Cryp]
BitDefenderGen:Variant.msilheracles.93901
BkavW32.Malware.EFABDD4E
CTXexe.unknown.msilheracles
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
ESET-NOD32MSIL/Kryptik.AQBE trojan
Elasticmalicious (high confidence)
EmsisoftGen:Variant.msilheracles.93901 (B)
GDataGen:Variant.msilheracles.93901
GoogleDetected
KasperskyUDS:Trojan-Spy.MSIL.Noon.gen
Kingsoftmalware.kb.c.989
MalwarebytesMachineLearning/Anomalous.96%
MaxSecureTrojan.Malware.300983.susgen
McAfeeDTrojan:Win/Vidar.TB
MicroWorld-eScanGen:Variant.msilheracles.93901
MicrosoftTrojan:Win32/Wacatac.B!ml
Paloaltogeneric.ml
RisingMalware.Obfus/[email protected] (RDM.MSIL2:xgOgmPXOBXQm/qEtKTSzsQ)
SangforTrojan.Msil.Kryptik.Vk92
SentinelOneStatic AI - Malicious PE
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
TencentMsil.Trojan.Kryptik.Dflw
TrellixENSArtemis!A5983CFDBFE5
TrendMicro-HouseCallTrojan.Win32.VSX.PE04CA3
VBA32Malware-Cryptor.MSIL.AgentTesla.Heur
VIPREGen:Variant.msilheracles.93901
VaristW32/MSIL_Agent.KBL.gen!Eldorado
VirITTrojan.Win32.MSIL_Heur.A
huorongTrojan/MSIL.Injector.nj