'수출용 골드바 매매 계약서'로 위장한 악성 워드문서 - ASEC BLOG
Tags
| maec-delivery-vectors: | Watering Hole |
Common Information
| Type | Value |
|---|---|
| UUID | 78777ae0-db7c-499e-9989-a4071c864d02 |
| Fingerprint | 15cc39f45dfd6bbb |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Aug. 24, 2021, 3 p.m. |
| Added to db | Jan. 30, 2023, 4:32 p.m. |
| Last updated | Nov. 17, 2024, 6:54 p.m. |
| Headline | ‘수출용 골드바 매매 계약서’로 위장한 악성 워드문서 |
| Title | '수출용 골드바 매매 계약서'로 위장한 악성 워드문서 - ASEC BLOG |
| Detected Hints/Tags/Attributes | 8/1/7 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://asec.ahnlab.com/ko/26609/ |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 5 | wnd.save |
|
| Details | Domain | 2 | regedit.onlinewebshop.net |
|
| Details | File | 376 | wscript.exe |
|
| Details | File | 4 | 1589989024.xml |
|
| Details | File | 64 | list.php |
|
| Details | md5 | 1 | fd2829488c4172ffc97700fbc523d646 |
|
| Details | Url | 1 | http://regedit.onlinewebshop.net/hosteste/rownload/list.php?query=1 |