Overview

overview

8

Static

static

8

KN0408_045...��.chm

 

KN0408_045...��.chm

 

KN0408_045...호.js

 

KN0408_045...호.js

 

LG유플�...��.chm

 

LG유플�...��.chm

 

LG유플�...�.html

 

LG유플�...�.html

 

LG유플�...�.html

 

LG유플�...�.html

 

LG유플�...ml.lnk

 

LG유플�...ml.lnk

 

MAIL_20230...02.chm

 

MAIL_20230...02.chm

 

Message.chm

 

Message.chm

 

Message.chm

 

Message.chm

 

APT 37 Pre...��.doc

 

APT 37 Pre...��.doc

 

NTS_eTaxInvoice.chm

 

NTS_eTaxInvoice.chm

 

Sharing

Copy URL Twitter E-mail

General

  • Target

    230321-3gbe5sff7z_pw_infected.zip

  • Size

    7.3MB

  • MD5

    b59962c774fa0b2414ef36918464072a

  • SHA1

    8530e9a5ea80491a8d4fbdfcf8d5e5ed07c26d02

  • SHA256

    fa0060b34ef203ec0382fb4dc7c255e7d7a50408fa70c7a9f59c68a0fca32a28

  • SHA512

    f702c3615c4dfd97be896650bc2e16a740f5cc17bd763be42a4c6fa3c6e7348811afb26495ee3ecd8c791e664072aea12ea20eed40679ac09d28fec5ee3da152

  • SSDEEP

    196608:t0ebuFq5AWt4rOQrZRQxB7dwwPc8DqGa5JKT:xPtyOmRQxUIDqzJKT

Score
8/10
macromacro_on_action

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

    macromacro_on_action
  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

    macro

Files

  • 230321-3gbe5sff7z_pw_infected.zip
    .zip

    Password: infected

  • APT 37 Previous Commits 3.7z
    .7z

    Password: infected

  • APT 37 Previous Commits 3/KN0408_045 정영호.rar
    .rar
  • KN0408_045 정영호/KN0408_045 정영호.chm
    .chm
  • KN0408_045 정영호/KN0408_045 정영호.html (2)
    .js
  • APT 37 Previous Commits 3/LG유플러스_이동통신_202207_이_선.rar
    .rar
  • LG유플러스_이동통신_202207_이_선.chm
    .chm
  • LG유플러스_이동통신_202207_이_선.html
    .html
  • APT 37 Previous Commits 3/LG유플러스_이동통신_202208_이_선.rar
    .rar
  • LG유플러스_이동통신_202208_이_선.html
    .html
  • LG유플러스_이동통신_202208_이_선.html.lnk
    .lnk
  • APT 37 Previous Commits 3/MAIL_20230125151802.rar
    .rar
  • MAIL_20230125151802.chm
    .chm
  • APT 37 Previous Commits 3/Message (1).rar
    .rar
  • Message.chm
    .chm
  • APT 37 Previous Commits 3/Message.rar
    .rar
  • Message.chm
    .chm
  • APT 37 Previous Commits 3/NEW(주)엠에스북스 사업자등록증.doc
    .doc windows office2003

    ThisDocument

    NewMacros

  • APT 37 Previous Commits 3/NTS_eTaxInvoice (1).rar
    .rar
  • NTS_eTaxInvoice.chm
    .chm
  • APT 37 Previous Commits 3/NTS_eTaxInvoice (2).rar
    .rar
  • APT 37 Previous Commits 3/NTS_eTaxInvoice.rar
    .rar
  • APT 37 Previous Commits 3/News about Foreign affairs, The High North and Ukraine (1).rar
    .rar
  • APT 37 Previous Commits 3/News about Foreign affairs, The High North and Ukraine.rar
    .rar
  • APT 37 Previous Commits 3/Oxygen_Generator.rar
    .rar
  • APT 37 Previous Commits 3/Provincil's letter.rar
    .rar
  • APT 37 Previous Commits 3/References.rar
    .rar
  • APT 37 Previous Commits 3/mmexport1638437859483.rar
    .rar
  • APT 37 Previous Commits 3/pay_202111_5_00-10290.rar
    .rar
  • APT 37 Previous Commits 3/pay_202111_5_01-10104.rar
    .rar
  • APT 37 Previous Commits 3/pay_202111_5_02-12972.rar
    .rar
  • APT 37 Previous Commits 3/pay_202111_5_04-10220.rar
    .rar
  • APT 37 Previous Commits 3/pay_202111_5_04-14213.rar
    .rar
  • APT 37 Previous Commits 3/pay_202111_5_12-11985.rar
    .rar
  • APT 37 Previous Commits 3/pay_202202_5_06-10325.rar
    .rar
  • APT 37 Previous Commits 3/pay_202205_5_01-10104.rar
    .rar
  • APT 37 Previous Commits 3/pay_202209_5_01-502479.rar
    .rar
  • APT 37 Previous Commits 3/samsungfire (1).rar
    .rar
  • APT 37 Previous Commits 3/samsungfire (2).rar
    .rar
  • APT 37 Previous Commits 3/samsungfire.rar
    .rar