'코로나바이러스 피해 소상공인 경영안정자금' 이름의 한글문서 유포 - ASEC BLOG
Tags
| attack-pattern: | Malware - T1587.001 Malware - T1588.001 |
Common Information
| Type | Value |
|---|---|
| UUID | 1260ee97-735e-4931-a0b8-6588b0c7e65f |
| Fingerprint | dd8d2a6e071bfd92 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Dec. 15, 2020, 7:09 p.m. |
| Added to db | Jan. 30, 2023, 4:34 p.m. |
| Last updated | Nov. 7, 2024, 6:48 p.m. |
| Headline | ‘코로나바이러스 피해 소상공인 경영안정자금’ 이름의 한글문서 유포 |
| Title | '코로나바이러스 피해 소상공인 경영안정자금' 이름의 한글문서 유포 - ASEC BLOG |
| Detected Hints/Tags/Attributes | 10/1/22 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://asec.ahnlab.com/ko/19131/ |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 2 | smtper.cz |
|
| Details | Domain | 1 | otp.greenulz.com |
|
| Details | Domain | 1 | blog.greenulz.com |
|
| Details | Domain | 1 | green.smtper.cz |
|
| Details | Domain | 1 | cafe.greenulz.com |
|
| Details | 1 | d@blog.greenulz.com |
||
| Details | 1 | u@green.smtper.cz |
||
| Details | File | 2 | wscapi.dll |
|
| Details | File | 1 | mss.dat |
|
| Details | File | 3 | s.png |
|
| Details | File | 44 | logo.png |
|
| Details | File | 3 | hwdoor.c4 |
|
| Details | File | 1 | logo.php |
|
| Details | md5 | 1 | ca567e78ef5141676dadf7938e0506d6 |
|
| Details | md5 | 1 | 1d4654e47e61992054ead321f01f500a |
|
| Details | Pdb | 1 | j:\2020_work\pehyper\mpr\release\mpr.pdb |
|
| Details | Pdb | 1 | j:\2020_work\pehyper\wscapi\release\wscapi.pdb |
|
| Details | Url | 1 | http://g.smtper.cz/log/d/s.png |
|
| Details | Url | 1 | http://otp.greenulz.com/assets/logo.png |
|
| Details | Url | 1 | ftp://d:d@blog.greenulz.com/design/usoprive |
|
| Details | Url | 1 | ftp://u:u@green.smtper.cz/gate/usoprive |
|
| Details | Url | 1 | https://cafe.greenulz.com/design/logo.php?time=400 |