| N/A | |
| Zip archive data, at least v2.0 to extract | 103589 |
| N/A | |
| d062f632a5ef121b1a220daa7505cfd4 | |
| fe9a768a98606fd73dc627f50b34ff564f2b9037 | |
| 03351dd513575355571284b9852d2970385e617148e3de382efd8c1abfad4a50 | |
| N/A | |
| N/A | |
| N/A | |
| N/A | |
| Deflated | |
| application/zip | |
| N/A | |
| 103283 | |
| 0xb20fbcd7 | |
| 139264 | |
| ZIP | |
| 101 kB | |
| Dhl_Status_9207659517492159__Id10__4541153453853694GXTCO____DA__KRL__L11_06_2015___atdeDHL_ACJ235115.exe | |
| 20 | |
| Source: |

| AVG | Inject2.CIDS |
| Ad-Aware | Trojan.GenericKD.2482875 |
| Arcabit | Trojan.Generic.D25E2BB |
| Avast | Win32:Malware-gen |
| Avira | TR/Emotet.A.186 |
| Baidu-International | Backdoor.Win32.Androm.hfna |
| BitDefender | Trojan.GenericKD.2482875 |
| ClamAV | Suspect.Bredozip-zippwd-2 |
| DrWeb | Trojan.Emotet.108 |
| ESET-NOD32 | Win32/Emotet.AD |
| Emsisoft | Trojan.GenericKD.2482875 (B) |
| F-Secure | Trojan.GenericKD.2482977 |
| GData | Trojan.GenericKD.2482875 |
| Ikarus | Trojan.Win32.Emotet |
| K7AntiVirus | Trojan ( 004b8c611 ) |
| K7GW | Trojan ( 004b8c611 ) |
| Kaspersky | Backdoor.Win32.Androm.hfna |
| Malwarebytes | Trojan.Agent.RCE |
| McAfee | Emotet-CJ!heur!D062F632A5EF |
| MicroWorld-eScan | Trojan.GenericKD.2482875 |
| Panda | Trj/RansomCrypt.D |
| Qihoo-360 | Win32/Trojan.Multi.daf |
| Sophos | Troj/Invo-Zip |
| Symantec | W32.Cridex.B |
| TrendMicro | TSPY_EMOTET.XXSJ |
| TrendMicro-HouseCall | TSPY_EMOTET.XXSJ |