PULSE NAME
3CX DesktopApp Supply Chain Attack Also Detected in Korea - ASEC BLOG
WHITE CyberHunter_NL 2023-04-10 Modified: 2023-04-10
80
IOCs
HIGH VOLUME
A supply chain attack through 3CX DesktopApp has been detected in North Korea, and this post will provide an analysis of the malware used in the attacks and their infection in Korea. and other countries.
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
ASD
Indicators of Compromise (10 / 80 total)
All URL CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 188754814b37927badc988b45b7c7f7d6b4c8dd3 SHA1 of c485674ee63ec8d4e8fde9800788175a8b02d3f9416d0e763360fff7f8eb4e02 2023-04-10
FileHash-SHA1 19f4036f5cd91c5fc411afc4359e32f90caddaac SHA1 of 5407cda7d3a75e7b1e030b1f33337a56f293578ffa8b3ae19c671051ed314290 2023-04-10
FileHash-SHA1 20d554a80d759c50d6537dd7097fed84dd258b3e SHA1 of 11be1803e2e307b647a8a7e02d128335c448ff741bf06bf52b332e0bbf423b03 2023-04-10
FileHash-SHA1 3b3e778b647371262120a523eb873c20bb82beaf SHA1 of 8ab3a5eaaf8c296080fadf56b265194681d7da5da7c02562953a4cb60e147423 2023-04-10
FileHash-SHA1 3b88cda62cdd918b62ef5aa8c5a73a46f176d18b SHA1 of aa4e398b3bd8645016d8090ffc77d15f926a8e69258642191deb4e68688ff973 2023-04-10
FileHash-SHA1 769383fc65d1386dd141c960c9970114547da0c2 SHA1 of a64fa9f1c76457ecc58402142a8728ce34ccba378c17318b3340083eeb7acc67 2023-04-10
FileHash-SHA1 b2a89eebb5be61939f5458a024c929b169b4dc85 SHA1 of fee4f9dabc094df24d83ec1a8c4e4ff573e5d9973caa676f58086c99561382d7 2023-04-10
FileHash-SHA1 bea77d1e59cf18dce22ad9a2fad52948fd7a9efa SHA1 of aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 2023-04-10
FileHash-SHA1 bf939c9c261d27ee7bb92325cc588624fca75429 SHA1 of 7986bbaee8940da11ce089383521ab420c443ab7b15ed42aed91fd31ce833896 2023-04-10
FileHash-SHA1 bfecb8ce89a312d2ef4afc64a63847ae11c6f69e SHA1 of 59e1edf4d82fae4978e97512b0331b7eb21dd4b838b850ba46794d9c7a2c0983 2023-04-10