Extracted

• • Target
    국세 환급금 지급 안내.pdf.lnk
  • Size 2KB
  • SHA256 c567c50a6c7820c2dcd20249dd4aacfbadde7b22424a7e799edde22380f121ce
  • MD5 bcc6d4f479351fdbe1494721f0302783
  • SHA1 aff1781212ffce3bf17420e41efd1d38c57c8937
  • SHA512 d88aa87742ab8eafbca9f20a383f44c96fa2a69c5408f1305789de3de9cc01caa26472c7f8e2dfb27cee06864de609cbed94d5009d75edf6d4aa6c91f88ba84a
  • TLSH
    T1D85110121EF612AAE37397B257FB72556537F864AB07099C40C146001D51A18F87AFBF
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  discoveryexecutiondefense_evasionspywaretrojan

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1behavioral2