DHL DOC 7465389.pdf.xz

Classification: Malicious

DHL DOC 7465389.pdf.xz is a trojan (application/x-rar). Detected by 49 antivirus engines. Linked to Uroburos malware.

Detection summary

  • 49 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: UROBUROS (S0022)

Intrusion sets: TURLA (G0010)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Snake ThreatFox Abuse.ch 2025-02-20 09:35:56 2025-02-22 09:51:48 G0010 Turla S0022 Uroburos
SnakeKeylogger MalwareBazaar Abuse.ch 2022-05-12 05:26:56 2022-05-12 05:26:56 malicious-activity

Tags

win.snake ekans snakehose

Sample information

Filenames
DHL DOC 7465389.pdf.xz
File type
application/x-rar
MD5
c59fc968f6d7b4d39d65de29b5685603
SHA-1
118b27b97dcc044af0cd7c07540c034e207298c2
SHA-256
f656604538654dd3243b458789440e5a31b6a404cce9521ce9a4706039295012
First indexed
2022-05-12 06:15:09
Last updated
2026-09-13 19:28:18

Antivirus detections

EngineDetection
ALYacTrojan.Keylogger.Snake
AVGWin32:PWSX-gen [Trj]
AhnLab-V3Trojan/Win.MSILKrypt.R491626
Antiy-AVLGrayWare/Win32.Kryptik.a
ArcabitTrojan.Generic.D25CD7EF
AvastWin32:PWSX-gen [Trj]
AviraTR/Spy.Agent.fkwbe
BitDefenderTrojan.GenericKD.39639023
CAT-QuickHealTrojan.Ghanarava.1652898364cfa9c0
CTXrar.trojan.msil
ClamAVWin.Packed.Generic-10018901-0
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
DrWebBackDoor.RatNET.2
ESET-NOD32MSIL/Spy.Agent.AES
EmsisoftTrojan.GenericKD.39639023 (B)
F-SecureTrojan.TR/Spy.Agent.fkwbe
FireEyeTrojan.GenericKD.39639023
FortinetMSIL/SnakeL.A9C0!tr
GDataMSIL.Trojan-Spy.Snake.9ARIX1
GoogleDetected
IkarusTrojan.MSIL.Inject
K7AntiVirusTrojan ( 00564f471 )
K7GWTrojan ( 00564f471 )
KasperskyHEUR:Trojan.MSIL.Gorgon.gen
LionicTrojan.MSIL.Stealer.i!c
MalwarebytesMalware.AI.1445979682
MaxSecureTrojan.Malware.73911067.susgen
McAfeeArtemis!C59FC968F6D7
MicroWorld-eScanTrojan.GenericKD.39639023
NANO-AntivirusTrojan.Win32.Gorgon.jreepc
RisingSpyware.Agent!8.C6 (KTSE)
SangforSuspicious.Win32.Save.pkr
SentinelOneStatic AI - Malicious Archive
SkyhighBehavesLike.Generic.hc
SophosMal/RarMal-C
SymantecTrojan.Gen.NPE
TencentMalware.Win32.Gencirc.115da81b
TrendMicroTrojanSpy.MSIL.NEGASTEAL.RJAHSKD
TrendMicro-HouseCallTrojanSpy.MSIL.NEGASTEAL.RJAHSKD
VBA32TScope.Trojan.MSIL
VIPRETrojan.GenericKD.39639023
VaristW32/MSIL_Kryptik.HFQ.gen!Eldorado
VirITTrojan.Win32.MSIL.BUO
WebrootW32.Trojan.Gen
XcitiumMalware@#2q0uwmj6132ep
YandexTrojan.Igent.bXYUN7.1
ZonerTrojan.Win32.135842
huorongTrojanSpy/MSIL.Stealer.a