Extracted

• • Target
    국세 환급금 지급 안내.pdf.lnk
  • Size 2KB
  • SHA256 8066e835f36a2c5c9ad7250f29ffd6b50db493da1d60cde575df6110dab87806
  • MD5 fc643bbeb7f3071d3bb2850e1cd6ba3b
  • SHA1 1e01055c608f8eb0ae08ca64fd61dedcd2c0f42c
  • SHA512 a6326df37288c80f18774b51800ad0fb689f59e8dbaa364828884793a309009cf39d073e1365212f6641b386cbb2e34fcd0aba17be6024b168d7f6ad2df765b6
  • TLSH
    T1855121122AF602AAF373877257FAB6596533F828AB07099C40D152001D11A14E876FBB
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  adwarepersistenceransomwarespyware

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2