Extracted

• • Target
    국세 환급금 지급 안내.pdf.lnk
  • Size 2KB
  • SHA256 568b218e978409b5afe37f768a7b0d5fdde23f27f5ed2f39dde17f238e85e6a9
  • MD5 77dbb247a11521e16b24b76399f14b6f
  • SHA1 3aee1ea921bd6dd6a5aa2cf105b21257b8519727
  • SHA512 765cb63eb94eb29715d95a2e5c6d7f3d089fc24861c70b174ff5dc796404bc9d97850e908bcbd44d558f746eef4bad3682372e55925691f667b70f39d17bc92c
  • TLSH
    T1AE5110161EFA026AF373DB7257FAB6556537F824AB0349AC41C102401D21A14F87AFAF
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  defense_evasiondiscoveryexecutionspywaretrojan

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1behavioral2