General
- Target KIEFEL Packaging GmbH Purchase Order.rar
- Size 347KB
- Sample230706-h7tdeshd93
- SHA256 9a29059d2b2cc0ddb01f8d8459d8728a48bac5e9f504dfb805a7045b9e8bfd44
- MD5 e78ac9afcc64ebd5ab58997166ab6e94
- SHA1 78c83bad35af2e182ab3eb2901abd7ea49b6db26
- SHA512 5b39132e6db923a077e0d0fdcfb239b7590a33e6d8cbce31e00e2016299ef463068a9bbda246d07d8030a45d672d4fcc7e6fe37b9a331a5d9931fd1ec3db9e38
- SSDEEP 6144:gtXK3g6OXf5tSyE6xr9Q4LHyny/kk0yQFzriEgUTSIKru4cn0L0YcffJnfRptzr6:UXGgtxlE6N9tDynRyQViE7TSIKKF0L0I
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KIEFEL Packaging GmbH Purchase Order.exe
Resource
win7-20230703-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
KIEFEL Packaging GmbH Purchase Order.exe
Resource
win10v2004-20230703-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target KIEFEL Packaging GmbH Purchase Order.exe
- Size 362KB
- SHA256 e4f9c1298c90f9ffbb03d200ffdad6dae09bd94e1a408a3ba6a1b671d567b2c1
- MD5 d8b43c0f720ab0f7eead21aa70827cb2
- SHA1 0fa1081253bb226bcc6f51c7bc817ba0c656ad9d
- SHA512 121abcb96204657e40f0892754b7acab7d98c3718c89117022af248ff3c69d8e54b414ca789d4cd21640e8a07ffe40c918c6cfe4d6f79ab93b83b27b969f61c4
- SSDEEP 6144:/Ya6rw42xgWR6S/OfkfPfbwMI+NHE+FFAJMVLfz85PotMSsZJeDc:/Y5w422WAS2G31Imk+FFEeLfzlmZUDc
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext