Hackers Weaponize HWP Documents to Attack National Defense and Press Sectors
Tags
country: North Korea South Korea
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vulnerabilities - T1588.006 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID f1fc85f0-a3b5-42a6-8e3b-9df72e713ac9
Fingerprint c2e1a40b85feeec2
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 1, 2023, 12:32 p.m.
Added to db Nov. 1, 2023, 1:58 p.m.
Last updated Nov. 15, 2024, 12:36 p.m.
Headline UNKNOWN
Title Hackers Weaponize HWP Documents to Attack National Defense and Press Sectors
Detected Hints/Tags/Attributes 38/2/12
Source URLs
Redirection Url
Details Source https://gbhackers.com/hackers-weaponize-hwp-documents/
URL Provider
Details Provider Source level domain
Details gbhackers.com gbhackers.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 125 ✔ GBHackers Security | #1 Globally Trusted Cyber Security News Platform https://gbhackers.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 4 
host.sharingdocument.one
Details Domain 4 
mail.smartprivacyc.com
Details Domain 291 
raw.githubusercontent.com
Details File 4 
zz.bat
Details File 5 
oz.txt
Details File 5 
pq.txt
Details File 65 
info.txt
Details File 4 
thumbs.log
Details Url 2 
http://host.sharingdocument.one/dashboard/explore/starred?hwpview=[specific
Details Url 2 
http://mail.smartprivacyc.com/get/account/view?myact=[specific
Details Url 4 
https://raw.githubusercontent.com/babaramam/repo/main/pq.txt
Details Url 3 
https://raw.githubusercontent.com/babaramam/repo/main/info.txt