General
- Target KIEFEL Packaging GmbH Purchase Order.rar
- Size 243KB
- Sample230703-lc2m4aha9v
- SHA256 e58e16e3740864003da7c70ddccac52994eaf22d2d98c725490b8a52ff9c2a23
- MD5 d06c4508159460a49aa1fdcb6200d69f
- SHA1 812a55814e4edba00daf3c63bbc77d2b3c8c1b99
- SHA512 9a8f7c4715dca690268c591bcb21198afbbcdadaec02755b80c94bccf4c956ef2a90eb5f4361b0f57c821a7c2067a8bb173b823ca4e84b89170d2f4fee1e92a9
- SSDEEP 6144:6L+3+XFs/Er5iQNQK2Sz/FKznPzWNFzxHxBP25t8LTVRJ94yB37:6C2FRr5xQrs8zPziVxBO5qnV
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KIEFEL Packaging GmbH Purchase Order.exe
Resource
win7-20230621-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
KIEFEL Packaging GmbH Purchase Order.exe
Resource
win10v2004-20230621-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target KIEFEL Packaging GmbH Purchase Order.exe
- Size 258KB
- SHA256 2ac28f2913c6e2d231d0b67b49a3491f4046221a42ca349f586e0532ac257575
- MD5 8d276ee3362001b72a013859101e510a
- SHA1 003cab48fe55d9e5a6694d29f2492cd1678fbc92
- SHA512 75e315832f286eeef283e42a39c8d16b0818d147d6c9fb562bb5981593bda2af8edadd73a0ed9c6519734eb263b22d94c108f0d4e814d9dbe98c2fb7401e00a4
- SSDEEP 6144:/Ya6B8BZlDcjKX1O1UOptR2vqxBcw+YVUul/JNdRhmOQzEY:/YT8z9NXcGDqQcGm/pRhgoY
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext