Extracted

• • Target
    국세 고지서.pdf.lnk
  • Size 2KB
  • SHA256 e45e9f204f3116fe9e84441321855c88e45c79ad50bb5d2ec48d061a03ffaddb
  • MD5 35b4206c73921b370be2f5e1de56d107
  • SHA1 ed34e18e7542edb6e8185df10b650e04bfa475a6
  • SHA512 593cbcab97496bb39de9f687e837ebdc9eb7f3c5e25202233e67abe0cfc086fbe5007e6d8db683deaace9bedf4c1864c29f020090300232c3968341688f1f86f
  • TLSH
    T1F55142122EF502A9F373D7B257FB76196637F8749B03099C41D142001E51614E87AFBB
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1behavioral2