General
- Target tax_notice.zip
- Size 1KB
- Sample260723-w2lnaace66
- SHA256 7b5498a7c41885f015770dfeb1e270c9571395a22a06abe265d6451dcfc5cbb3
- MD5 d80394dead29a1e61433677c52f57f4c
- SHA1 4663c003c1e32199becaf059a0164e0ec2c9e9c4
- SHA512 6dfe3e9ae4ee8265490e56043de12ce476bac0cd9e2b635ffd463b10563f7ddaac13b3ba0c6f12578f1100db6e0dcdd10d2f918f5ac7d32de4138928398931e0
- TLSH T1FC31B73C152D4ED0D09B9EBC425F8FB667E5B24076A67B315DA8C1007911CAC51A6619
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
국세 고지서.pdf.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
국세 고지서.pdf.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://link24.kr/HHf2u9U
Targets
-
- Target 국세 고지서.pdf.lnk
- Size 2KB
- SHA256 c525bef462e0077f2ac6fd07412322fb634c8724aa46e1743c1e30cafbc51183
- MD5 66acb4089014f4c01d3d376b8aa129f3
- SHA1 ca6ee511e35996cd4d0b01e107f6c3875abfbb2c
- SHA512 551df163d64f38b0baf93c84dbf4c740a43bda6718328952ca00eace850cc1a74de933e1af64a1b04c1b249ae041cdc0ab3b2939318f07e6e402b8dc96cb9a4e
- TLSH T10A5130121EFA0369E373DB7257FBB2116537B824AB06099C40C146001D62A18F87AFBF
- MD5 SHA1 SHA512 TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.