The malware often includes "anti-analysis" features to detect if it is being run in a sandbox or virtual machine, allowing it to hide from some basic antivirus checks. Typical Scam Characteristics
Analysis of similar "DHL.zip" or related archive attachments has identified several serious threats: DHL.zip
A sophisticated information stealer that captures keystrokes and extracts login credentials from browsers and email clients. DHL.zip
These files often contain executables masquerading as shipping documents (e.g., DhL-FINAL SHIPING DOCUMENTS.exe ). Common payloads include: DHL.zip
An infostealer that uses process hollowing to evade detection and maintain persistence on your system.
The emails delivering "DHL.zip" typically use the following social engineering tactics: DHL Delivery problem NR 3H6JZBN scam email - Kenkai