General

  • Target
    tax_refund.zip
  • Size 1KB
  • Sample260722-pnlb2avcrf
  • SHA256 2c493dc03636535eeb20ff63d8ab032ab106a162d64df482ea12265382e04fff
  • MD5 SHA1 SHA512 TLSH
Score
10/10

Malware Config

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    https://link24.kr/Awhl9zA

Targets

    • Target
      국세 환급금 지급 안내.pdf.lnk
    • Size 2KB
    • SHA256 d420b502cf241cc611aa93168b5ea1531876b586e63d835795e4e62717875269
    • MD5 SHA1 SHA512 TLSH
    Score
    10/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks