Overview

overview

10

Static

static

5

암호.txt.lnk

windows10-2004-x64

10

암호.txt.lnk

windows11-ltsc_2024-x64

10

지급명�...��.pdf

windows10-2004-x64

3

지급명�...��.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    payment_order_notice.zip
  • Size 780KB
  • Sample260825-ahfr2afe46
  • SHA256 7633c53ee13aec91dd2db6a4e97ebcbcfe4bb6abd7bacd4f01f73897add6d806
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
adwarediscoveryexecutionpdfspyware

Malware Config

Extracted

Language

  • hta

Source
URLs
  • hta.dropper

    https://link24.kr/4Fv8pBF

Targets

    • Target
      암호.txt.lnk
    • Size 2KB
    • SHA256 ef2ecace73eb74f73be2ef2d3a7b13ad716f7a1651e9b2399071a6362e425694
    • MD5 SHA1 SHA512 TLSH
    Score
    10/10
    execution

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2
    • Target
      지급명령 통지서.pdf
    • Size 865KB
    • SHA256 a0cf2ec2a350f84ccb41a5a22c1f3aee16d3bbd4088b5a7961a0d450ed5e55cf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks