General
- Target 25082026_1513_20260825_보안서류_No04.lnk.zip
- Size 82KB
- Sample260825-slvpgahf59
- SHA256 08a20fb2c19b2fad2854be57ab62a0218132a2281ca889870717df977e3e6d92
Score
8/10
Malware Config
Targets
-
- Target 20260825_보안서류_No04.lnk
- Size 8.5MB
- SHA256 2731383d51d953602677368a293459d181e35eb1217654aa5b992f352575c5fd
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.