Extracted

• • Target
    암호.txt.lnk
  • Size 2KB
  • SHA256 ef2ecace73eb74f73be2ef2d3a7b13ad716f7a1651e9b2399071a6362e425694
  • MD5 52fc8d9a5acf7f65a76eaf322980c008
  • SHA1 f2321f2820e755c26d8cbae4d208e82e550868e9
  • SHA512 4c4f754fe912480172873359fd97be81cd7381e186ad214362e8d29bee0f81315879ca3b2749fa7b956b6fe9adfdfe23ee963a7414d11c0a254709c53805498f
  • TLSH
    T19D5111161FE5126EF373877667FAB2596222F874AB034AEC41D112405E50604F876F7E
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  defense_evasionexecutionspywaretrojan

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1behavioral2
• • Target
    지급명령 통지서.pdf
  • Size 865KB
  • SHA256 a0cf2ec2a350f84ccb41a5a22c1f3aee16d3bbd4088b5a7961a0d450ed5e55cf
  • MD5 88f30f325caba8351450dec8d5966396
  • SHA1 38467c450c60d50b512e6d490bd9655dbb635747
  • SHA512 f925cfc0c055324fe7f0233da086c92088e01e2be580f36f8308bd1c19a754048db1ceae842258631a459e68be98857295ddf8af4d30e1f67ca6092ac4870efc
  • SSDEEP 12288:GhAoY/woHYrJR/qIGOOYQIMMmmkEdQESjb+MYkZjdspd/Bhojqg+vcWTwhQBHW:G+nzcJp1cYQIT9Sjb+M27ZhvPE1hQJW
  • TLSH
    T1DF15D0F893259890D0C10664BF2D769B81CBA0F1454BF56B6FA8C1DB0A90FD5B094FFA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  adwarediscoveryspyware
  behavioral3behavioral4