북한인권단체를 사칭한 APT37 공격 사례

2023-05-23 • Genians • Case of APT37 attack impersonating a North Korean human rights organization •

https://www.genians.co.kr/hubfs/blogfile/threat_intelligence_report_apt37.pdf

Attachments

threat_intelligence_report_apt37.pdf (2 MB)

Thumbnail for 북한인권단체를 사칭한 APT37 공격 사례

Genians analyzed an APT37 campaign that impersonated a North Korean human-rights organization to target South Korean individuals and organizations. The report maps the attack scenario from spear-phishing through LNK-based delivery, follow-on payload execution, and attacker infrastructure. It frames the case as a threat-hunting study of APT37 tactics, techniques, and procedures, with indicators and defensive guidance for detecting similar North Korea-linked social-engineering operations.

Indicators of Compromise

Type Value First Seen Last Seen
HASH 6753933cd54e4eba497c48d63c7418a… 2023-05-01 2023-07-13
HASH f17ade8c0251c018ab291aa79c98377… 2023-05-23 2023-07-11
HASH 2d381a0156d8b0468d10dfd347b32cf… 2023-05-18 2023-07-11
HASH 1e0b5d6b85fca648061fdaf2830c5a9… 2023-05-01 2023-07-04
HASH cb4c7037c7620e4ce3f8f43161b0ec6… 2023-05-01 2023-06-06
HASH f92297c4efabba98befeb992a009462… 2023-04-21 2023-06-06
HASH 1ebf7d506d83fb5415c890bba175feac 2023-05-23 2023-05-23
HASH 6ffa17d5da06a643a2d4231497e66ee1 2023-05-23 2023-05-23
HASH e5fc86a7bae1e2269d543dfe83fd6625 2023-05-23 2023-05-23
HASH cfe96e925f8bfbe7ace33ddd41ead1fb 2023-05-23 2023-05-23
HASH a1abd7751874f8f16c72e1d4bc5427c… 2023-05-23 2023-05-23
HASH 22d42b6a20d655ce3719fab531ddd68… 2023-05-23 2023-05-23
HASH 59c146243f3b9315c71cacdaf838ddd5 2023-05-23 2023-05-23
HASH 840e2ea8a69bccbcfbfc7a764815960… 2023-05-23 2023-05-23
HASH 32407904ef8cf45f7e5e9abd561be45… 2023-05-23 2023-05-23
HASH dc6623c0a41842de56c0974f87f5a90… 2023-05-23 2023-05-23
HASH 6e531deb2b3a7b54782d44a1ec2f49b… 2023-05-23 2023-05-23
HASH a8a82038d1a91e9fdf538cb765d1be66 2023-05-23 2023-05-23
HASH 1b988660549a69d34a6be16f28357a1… 2023-05-23 2023-05-23
HASH 904781cfcc946573bd2bf8882c85edbd 2023-05-23 2023-05-23
HASH f28b17886120556c00874b15efad6a76 2023-05-23 2023-05-23
HASH 59ec061e82ffb23ea04414a08318362… 2023-05-23 2023-05-23
HASH 3357353cd75e0122a3a5bc489a33bff… 2023-05-23 2023-05-23
HASH 35ac9f5ab3caba22c4ca204074cd8c01 2023-05-23 2023-05-23
HASH 3b404f9a488f8286af82bc84e86b4c3… 2023-05-23 2023-05-23
HASH 1b046ab2261bc0dc5c6cd999f9a8b1c6 2023-05-23 2023-05-23
HASH 823b01b77a778de066b785616f940d2… 2023-05-23 2023-05-23
HASH 2f38f7f05de0c7a409d6c8adbcf51a2… 2023-05-23 2023-05-23
EMAIL [email protected] 2023-05-23 2023-05-23
EMAIL [email protected] 2023-05-23 2023-05-23
EMAIL [email protected] 2023-05-23 2023-05-23
DOMAIN imuz.com 2023-05-23 2023-05-23
IPv4 54.164.68.94 2023-05-23 2023-05-23
IPv4 44.199.48.119 2023-05-23 2023-05-23
HASH 0f5eeb23d701a2b342fc15aa90d97ae0 2023-04-21 2023-05-23
HASH c5c05f9df89fc803884fed2bd20a382… 2023-04-21 2023-05-23
HASH 479894be4c5dec0992ad3c5b21fb142… 2023-04-21 2023-05-23
HASH 3252345b2640efc44cdd98667dbd258… 2023-04-10 2023-05-23
HASH 171e26822421f7ed2e34cc092eaeba8… 2018-01-16 2023-05-23
HASH 281828d6f5bd377f91c6283c34896d0… 2017-02-23 2023-05-23

Related Actors

Related Reports

« Back