d6a0505d3af6315ae0d57586e715c4dda0bba20d06500b3435d7f9cb03724d56

General

Target
health_report.zip
Size 2.5MB
Sample260530-sdtgfaf161
SHA256 d6a0505d3af6315ae0d57586e715c4dda0bba20d06500b3435d7f9cb03724d56
MD5 ec820a2b8a7cd8145496942ac68a7dbf
SHA1 22189125edba4067d84ee7804850292e9e56bcac
SHA512 319c21b3bf6dc0ecf9d66a1e162c0edbf70ae08fb9b7d1191967b9ccf877c9d3b9fddd44c751aa65c32041a52d9ba5adf65674c49f502fc54d686c827350cd8a
SSDEEP 49152:IIlAgLbKN5lT2EvWaJlSk88NQk4JMrlRFYiFkzebtT73//kPtqFdKNM+:fqgLK5h2U58gN3EYOihbtPXSAZ+
TLSH
T1DBC533802A5170ED9BC1A1FB41C8255A43A5FB377ABB233B0637BBE5F61CB5A09C3454
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Language

hta

Source

URLs

hta.dropper
https://link24.kr/DlLZMgU

Targets

- Target
  2026년 건강검진 안내.pdf
- Size 2.2MB
- SHA256 6567d3b11fd774964eb1d2e811dab87619503953d5b320d674a0ea6f373452f7
- MD5 07e2595f4b88539ac7654ee1e54a96fc
- SHA1 adc51adb06468a2463a8a29f0c1e3ff9b2756eb9
- SHA512 10fb0f3c3129bf559e811e93853971a2c08cc9fb60b713ee2a3dff5d66c4c5967f9f1c86607c8f153a583b64375473c947a08086a9e41ca33f73a204812ab767
- SSDEEP 49152:2ml0Yb/Y/lDE2FWUJXKkk+NQG4jsHpnXGIlCeCttn3+v:9aYbg/tEixacNBkaWIatt3S
- TLSH
  T119B533503641B1FDE741D3F2A6546196D3E6B73A376E312F0B3BBAE9A804F1618D31A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  건강검진 문진표.pdf
- Size 293KB
- SHA256 f722183aa782d864ff6e1fcec0a54335e9cb2fbcf0839f2647e2af6ff22d54a0
- MD5 71d239ba11b60690c1128e19ca00c174
- SHA1 6ebb3582b4ea1ffbb3d7d0cfa7d6ebe53c0751e7
- SHA512 d1184a40dbc8969aafc6d4a2143f338b4b4565b40c210cb7e1850b3a0d9fa288f4b860d6f3aee41d70bf5d84567ef59c964db22d779eb382e7473e70dbe1dc5c
- SSDEEP 6144:gNh538GVj7qg5uJNM/oRMmmrf5ctz+vpz0x4uQnZh:gNb5VfqgQXvmL5y+vpQDQf
- TLSH
  T1FD5423CC42867C4CC5C32972B7D68673C1E7B2CA959ED62B3998CAC76254CDA3012EF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  암호.txt.lnk
- Size 2KB
- SHA256 f7964d3354dc97a62e34608e4d9defbba1b6bbc75b1d5d1d3ca316c3c668af0b
- MD5 dbef00d1079147df402b2226278d6414
- SHA1 8bf38682321f3dde35a43e8d6317afc6e686b782
- SHA512 0bfe5e6749d79b438d82cf05a5a377104826e464073a30abc51f44dd25b7db15432ffd0e30b11bd551510df30f4a28eb3a5f0be564790b9630467417469e5efd
- TLSH
  T1135120011EE502BAF373C77A17FABB0A5520F4789B0789AC41C12244AE90604F875B2E
- MD5 SHA1 SHA512 TLSH
Score

10^/10

defense_evasion spyware trojan
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral5 behavioral6