General

  • Target
    tax_notice.zip
  • Size 1KB
  • Sample260717-ph1vjaev6s
  • SHA256 c32518b702296ad929db80d6e6acf4d2abf3236d3fe365082c9e8dc8695ef9a8
  • MD5 SHA1 SHA512 TLSH
Score
10/10

Malware Config

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    https://link24.kr/GP5DOdo

Targets

    • Target
      국세 고지서.pdf.lnk
    • Size 2KB
    • SHA256 e45e9f204f3116fe9e84441321855c88e45c79ad50bb5d2ec48d061a03ffaddb
    • MD5 SHA1 SHA512 TLSH
    Score
    10/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks