Extracted

Extracted

• • Target
    [별첨1]_사고인지_유형별_증빙자료_예시-최종.lnk
  • Size 41.2MB
  • SHA256 c534df540c66e8578cf8400280cf8d8a4ed7a21a93fda27ec2e29e912f0dacaf
  • MD5 300bb48d11bc5d2b9ac558ec8e830882
  • SHA1 eeee1e0defa10f3791a3f00d804637f008ea4e07
  • SHA512 2961f9fa4356ce4b066d6ab2c12aa55f61a5c04653db304875c629afe5190f868dfd18a8b44d31982e415db304bba5cf8cd003ef795cd9cc907f4d089bd47753
  • SSDEEP 48:8j8b4rMWpW90Zpxv7pW9ArpKpkgpWmpWmp+RUCcM+diCp5laz5+I3ihlTMGpcTMO:802M+BjVhdcM+dibzF3inGTdxq+v
  • TLSH
    T10D97013484A4C2AE836F81E5B49B314A58713C65B7FBA50A4C63F29F3B5320B9FB150D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryexecution

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2
• • Target
    [별첨2]_인지시점_정정신고_추가_증적자료_FAQ.lnk
  • Size 44.2MB
  • SHA256 97fc1862fb55813ee199bbaef378bdf2e904cb73930a6a56903bef5614f2726b
  • MD5 9a2669460b7242a4a7e4834c29c1c7ed
  • SHA1 cef4a19e10c4ce29833a135cac96585dd50a2e13
  • SHA512 60750a8a35ab2fb15893161965e08b2ae0bfdacc1e524668c999ecde1cd629968fd0505f85de21a06b7f3b791cae846e59a33028495c857044f9d795acab6e26
  • SSDEEP 384:gWfXLiymzfcitQsEynfgu/nLnyd8rRgBW/nDY/nDM/V3W:gWmTzfZtQyoWnLydefnEnwV3W
  • TLSH
    T1DBA7003485C731AE8DB6C227A4474D89FBA19CCEE6C849031073A31723E7B169F62779
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryexecution

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral3behavioral4