PULSE NAME
3CX DesktopApp Supply Chain Attack Also Detected in Korea - ASEC BLOG
WHITE CyberHunter_NL 2023-04-10 Modified: 2023-04-10
80
IOCs
HIGH VOLUME
A supply chain attack through 3CX DesktopApp has been detected in North Korea, and this post will provide an analysis of the malware used in the attacks and their infection in Korea. and other countries.
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
ASD
Indicators of Compromise (10 / 80 total)
All URL CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 0eeb1c0133eb4d571178b2d9d14ce3e9 MD5 of 59e1edf4d82fae4978e97512b0331b7eb21dd4b838b850ba46794d9c7a2c0983 2023-04-10
FileHash-MD5 27b134af30f4a86f177db2f2555fe01d MD5 of c485674ee63ec8d4e8fde9800788175a8b02d3f9416d0e763360fff7f8eb4e02 2023-04-10
FileHash-MD5 2fdf61fdfd649f8bbf5730307a0ab5d1 MD5 of fee4f9dabc094df24d83ec1a8c4e4ff573e5d9973caa676f58086c99561382d7 2023-04-10
FileHash-MD5 5729fb29e3a7a90d2528e3357bd15a4b MD5 of 5407cda7d3a75e7b1e030b1f33337a56f293578ffa8b3ae19c671051ed314290 2023-04-10
FileHash-MD5 6426fe4dc604c7f1784ed1d48ab4ffc8 MD5 of aa4e398b3bd8645016d8090ffc77d15f926a8e69258642191deb4e68688ff973 2023-04-10
FileHash-MD5 660ea9b8205fbd2da59fefd26ae5115c MD5 of a64fa9f1c76457ecc58402142a8728ce34ccba378c17318b3340083eeb7acc67 2023-04-10
FileHash-MD5 74bc2d0b6680faa1a5a76b27e5479cbc MD5 of 7986bbaee8940da11ce089383521ab420c443ab7b15ed42aed91fd31ce833896 2023-04-10
FileHash-MD5 7faea2b01796b80d180399040bb69835 MD5 of 8ab3a5eaaf8c296080fadf56b265194681d7da5da7c02562953a4cb60e147423 2023-04-10
FileHash-MD5 82187ad3f0c6c225e2fba0c867280cc9 MD5 of 11be1803e2e307b647a8a7e02d128335c448ff741bf06bf52b332e0bbf423b03 2023-04-10
FileHash-MD5 f3d4144860ca10ba60f7ef4d176cc736 MD5 of aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 2023-04-10