한국해양대학교를 노린 Kimsuky(김수키)에서 만든 악성코드-2019년 졸업자 취업통계조사 붙임.chm(2024.7.8)
Tags
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Malware - T1587.001 Malware - T1588.001 |
Common Information
| Type | Value |
|---|---|
| UUID | 10068c93-1a68-4359-b075-7854ed466300 |
| Fingerprint | 2c4849fdcff3d57e |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Oct. 23, 2024, midnight |
| Added to db | Oct. 22, 2024, 5:40 p.m. |
| Last updated | Nov. 17, 2024, 6:54 p.m. |
| Headline | 꿈을꾸는 파랑새 |
| Title | 한국해양대학교를 노린 Kimsuky(김수키)에서 만든 악성코드-2019년 졸업자 취업통계조사 붙임.chm(2024.7.8) |
| Detected Hints/Tags/Attributes | 16/2/17 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | http://wezard4u.tistory.com/429308 |
| Details | Source | https://wezard4u.tistory.com/429308 |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 478 | ✔ | 꿈을꾸는 파랑새 | https://wezard4u.tistory.com/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 2 | chgt.ad |
|
| Details | Domain | 1 | trojan.generic-script.save |
|
| Details | File | 8 | 붙임.chm |
|
| Details | File | 34 | hh.exe |
|
| Details | File | 3 | vias.exe |
|
| Details | File | 2 | downloader.chm |
|
| Details | File | 19 | trojan.html |
|
| Details | File | 1 | s.chm |
|
| Details | File | 1 | c:\users\사용자\appdata\local\temp\9122.vb |
|
| Details | File | 9 | 악성코드-pnx01.apk |
|
| Details | File | 11 | 원리.pdf |
|
| Details | File | 10 | 악성코드-국내코로나19재감염사례현황.pdf |
|
| Details | md5 | 1 | 972be4aec6506e8bf4dc8d72491099f6 |
|
| Details | sha1 | 1 | bd9fc2efbd48468014b72717549ae2d12b47b247 |
|
| Details | sha256 | 1 | 8bbcbe5da611925fbe71c6b4b3ec34697b0ec4de4b9940e19ac94ff8f62e8d6f |
|
| Details | Microsoft Patch Numbers | 17 | KB5044273 |
|
| Details | Microsoft Patch Numbers | 19 | KB5044284 |