General
- Target tax_refund.zip
- Size 1KB
- Sample260722-pnlb2avcrf
- SHA256 2c493dc03636535eeb20ff63d8ab032ab106a162d64df482ea12265382e04fff
- MD5 5985d2874cdb972f69fdfe0f00c022b0
- SHA1 b2e324ca23ef1691c5783a4abb7f3291cd5e4b9e
- SHA512 2e483c0025fb510aec4aa29117e60d628c5a55d4020fa57424877ccaa8576b30e07274766ae163a24f9e219a6d405c29ac229083e36846370faeb4a4797eaf8b
- TLSH T18C31073CB24F6980C5486B3C0083C6D76787D10BF1B8AA6E7CE8D0189E1B0EDB76105B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
국세 환급금 지급 안내.pdf.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
국세 환급금 지급 안내.pdf.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://link24.kr/Awhl9zA
Targets
-
- Target 국세 환급금 지급 안내.pdf.lnk
- Size 2KB
- SHA256 d420b502cf241cc611aa93168b5ea1531876b586e63d835795e4e62717875269
- MD5 8bb1b176d4f4cd960326778370db20b9
- SHA1 153ed0d54fae5aa2324dee77425aa3adc1bad49b
- SHA512 9868193401baa9f7a89795074230748efc0e97321b1d3a9b8bcd56aa4bb9f7fb53d61490d9dbdb487ab054b19b1225beedd5869dcfd768b5e647dbaf5fbb0c42
- TLSH T1F651FF112EF502BEF37397B257FB76196536F8789B0309AC41D212401E51A14E87AFAB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.