General

  • Target
    02112026_0910_02112026_2026년 4분기 급여 구조 인상-pdf.rar
  • Size 1.7MB
  • Sample261102-k5jsbat12l
  • SHA256 8dd44bf3d3d22117b7e62b63ae6b9ff0cf6fd4ee4699da78e49c24914a732ca2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026년 4분기 급여 구조 인상-pdf.JS
    • Size 3.6MB
    • SHA256 9ae36574f6ed0b0058bed01d5a5fd5188067ec7c3c5c27b8f253a3190a95eadb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects DonutLoader

    • Family: DonutLoader

      DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks