Extracted

• • Target
    국세 고지서.pdf.lnk
  • Size 2KB
  • SHA256 7fc0ea9d7d0262e25afa38a6dedf991e632b718add4d69fbee0ec832688fc8eb
  • MD5 ae445e1e0853e28aa58ec7ca10afe293
  • SHA1 8c57eae2e3ba2455bce8a4359ccfc2eb5a9496e5
  • SHA512 e3f49f07c7c2732a6b0a82e4ca3f34dc20448a0c3cc320e85d515522e2d59b3f150280eca9363c9862dd1cd8b1299f9c405a6707c28de667daf0e5c03a99265f
  • TLSH
    T15F5121112EF602BEF37387B257FB76186636F8789B0709AC40D212001E51614E87AFBB
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1behavioral2