Extracted

• • Target
    국세 환급금 지급 안내.pdf.lnk
  • Size 2KB
  • SHA256 5e3d06ff73a1d3f319ce18c488232024d54bd1a1a081beaf48bc63c271df3500
  • MD5 8810e63282340859c556139c2ee7afd8
  • SHA1 05a00b8d34af2e9d0984aa4ea8d0d7559af07912
  • SHA512 0cb4674ce2d0e91a6950731de78fdb0ccb36964c4f100e6ae63cecfd177cedb76e5b8616b7dbfdc756a9300ebbe8281c1ad1cc54816884226c21184d9c50b374
  • TLSH
    T17C5101121AF602AEF37387B257FB76196533F8749B07499C40D216001D61A14F876FBB
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  defense_evasionexecutionspywaretrojan

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1behavioral2