General
- Target 28082026_0157_27082026_보험서류_20260827205189500458.lnk.zip
- Size 2KB
- Sample260828-cdk73asekf
- SHA256 648c4dc21ffe8d017f6d16ec22339430b2613c5e21c17edee866ad40c7dd8846
- MD5 4b7f5f25d457022bc19b95bf9d05d357
- SHA1 6cda7817bbd0d2168919155c88d964a4da6d0d93
- SHA512 52ccc17f4030b9fb75e1cd02226ad08c72592bef63caec8bcdb504f69db04ac86eb1b3541044f1a3f34a0e58e614bee5a0ab71af4aac8de3130e966494082182
- TLSH T1014107B04D7C269AD1AE33FB48A6076E7B9068C6B7040F5EB93D03183ADE1F6240B018
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
보험서류_20260827205189500458.lnk
Resource
win10v2004-20260513-en
19 signatures
300 seconds
Behavioral task
behavioral2
Sample
보험서류_20260827205189500458.lnk
Resource
win11ltsc2024-20260709-en
18 signatures
300 seconds
Malware Config
Targets
-
- Target 보험서류_20260827205189500458.lnk
- Size 11KB
- SHA256 f0c473791dbfd1937a1d6fe17e6b771689165a4d7d5cf94fd2eb1d2eeb8d6c96
- MD5 90fc85962ddd40f1bbfa6a1b8b56c368
- SHA1 e23f28b0ae4869e38fa7cfbf374cd85e4ee49aa0
- SHA512 bca7c85f1669cb607a13f006d7ffae16fbb259d1c34eb6db12377372b8c5130f961011cf1f64f64c74e63827a811c202fe36e2d0dbb0c0ea8dc6b8ca31187422
- SSDEEP 192:8ye3owkv8w1vdGaw1vdUzKOtT6gTZp8W8MEGNWXYXPzAv55Tqn7v/6Y0ovF+:ze3Yv5v4
- TLSH T19042FF3E1899123BD7F5EB2AD1A5D04EF152EEB33102BD0FA8E70385442D681B9D921F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.