Extracted

• • Target
    7월 신고 납부기한 통지서.pdf.lnk
  • Size 2KB
  • SHA256 568b218e978409b5afe37f768a7b0d5fdde23f27f5ed2f39dde17f238e85e6a9
  • MD5 77dbb247a11521e16b24b76399f14b6f
  • SHA1 3aee1ea921bd6dd6a5aa2cf105b21257b8519727
  • SHA512 765cb63eb94eb29715d95a2e5c6d7f3d089fc24861c70b174ff5dc796404bc9d97850e908bcbd44d558f746eef4bad3682372e55925691f667b70f39d17bc92c
  • TLSH
    T1AE5110161EFA026AF373DB7257FAB6556537F824AB0349AC41C102401D21A14F87AFAF
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  adwarepersistenceransomwarespyware

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2