General
- Target tax_notice.zip
- Size 1KB
- Sample260717-ph1vjaev6s
- SHA256 c32518b702296ad929db80d6e6acf4d2abf3236d3fe365082c9e8dc8695ef9a8
- MD5 e97c6b225501196a24b63e54a8ab1bed
- SHA1 9d5b5db7527725a2df863ee1d1e20edd4deab9f8
- SHA512 7a7fb09dfd70efc9d877ec538e968f8377cbb8a879bdc95e3a30dff7dff517f0a65c565d5416e1ab35015d4938a70f1066ac3694aed97116c54e4eb93472720a
- TLSH T1D431FCFCC31D1A40CB95D739C5D2CDD87598A500E271FA147E44D2795DA74843554703
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
국세 고지서.pdf.lnk
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
국세 고지서.pdf.lnk
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://link24.kr/GP5DOdo
Targets
-
- Target 국세 고지서.pdf.lnk
- Size 2KB
- SHA256 e45e9f204f3116fe9e84441321855c88e45c79ad50bb5d2ec48d061a03ffaddb
- MD5 35b4206c73921b370be2f5e1de56d107
- SHA1 ed34e18e7542edb6e8185df10b650e04bfa475a6
- SHA512 593cbcab97496bb39de9f687e837ebdc9eb7f3c5e25202233e67abe0cfc086fbe5007e6d8db683deaace9bedf4c1864c29f020090300232c3968341688f1f86f
- TLSH T1F55142122EF502A9F373D7B257FB76196637F8749B03099C41D142001E51614E87AFBB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.