CHM 악성코드에서 확인된 안티 샌드박스 및 기업 타겟 공격 - ASEC BLOG
Tags
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Software - T1592.002 |
Common Information
| Type | Value |
|---|---|
| UUID | a4aeaaa7-9ab6-4dcc-9ecd-dbe4828c047f |
| Fingerprint | 62e22910a79bb132 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | June 7, 2022, 4:58 p.m. |
| Added to db | Jan. 30, 2023, 4:35 p.m. |
| Last updated | Sept. 29, 2024, 1:27 p.m. |
| Headline | CHM 악성코드에서 확인된 안티 샌드박스 및 기업 타겟 공격 |
| Title | CHM 악성코드에서 확인된 안티 샌드박스 및 기업 타겟 공격 - ASEC BLOG |
| Detected Hints/Tags/Attributes | 4/2/8 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://asec.ahnlab.com/ko/35072/ |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | File | 14 | imagingdevices.exe |
|
| Details | File | 8 | chmext.exe |
|
| Details | File | 9 | v3l4sp.exe |
|
| Details | md5 | 2 | e33114a7894a1a284084861eee5f9975 |
|
| Details | md5 | 2 | 95d914d34e9cb5bd2e5db411ed5345b9 |
|
| Details | md5 | 6 | 210db61d1b11c1d233fd8a0645946074 |
|
| Details | md5 | 4 | 619649ce3fc1682c702d9159e778f8fd |
|
| Details | md5 | 4 | bb71af5c5a113a050ff5928535d3465e |