특정 항공사 자소서로 위장한 RTF 악성코드 - ASEC BLOG
Tags
Common Information
Type | Value |
---|---|
UUID | 3bc59a31-78ee-489c-87d6-500c56ed2557 |
Fingerprint | 1d070162e169ff3d |
Analysis status | DONE |
Considered CTI value | 0 |
Text language | |
Published | Oct. 13, 2021, 10:45 a.m. |
Added to db | Jan. 30, 2023, 4:35 p.m. |
Last updated | Nov. 17, 2024, 6:54 p.m. |
Headline | 특정 항공사 자소서로 위장한 RTF 악성코드 |
Title | 특정 항공사 자소서로 위장한 RTF 악성코드 - ASEC BLOG |
Detected Hints/Tags/Attributes | 5/0/11 |
Source URLs
Redirection | Url | |
---|---|---|
Details | Source | https://asec.ahnlab.com/ko/27678/ |
URL Provider
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | CVE | 375 | cve-2017-11882 |
|
Details | Domain | 4 | gozdeelektronik.net |
|
Details | Domain | 1373 | twitter.com |
|
Details | File | 1 | 자소서_.rtf |
|
Details | File | 57 | eqnedt32.exe |
|
Details | File | 4 | movie.png |
|
Details | File | 4 | movie.jpg |
|
Details | md5 | 2 | dd8bb1686f16924ac797620092776022 |
|
Details | Url | 4 | https://gozdeelektronik.net/wp-content/themes/0111/movie.png |
|
Details | Url | 4 | https://gozdeelektronik.net/wp-content/themes/0111/movie.jpg |
|
Details | Url | 2 | https://twitter.com/souiten/status/1446725907637358597 |