← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Analysis of the Spear-Phishing and KakaoTalk-Linked Threat Campaign
WHITE Konni Group Tr1sa111 2026-03-18 Modified: 2026-04-17
14
IOCs
MEDIUM VOLUME
spear-phishingautoitratrftratnorth korea lurepersistenceremcosratendratkakaotalk
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
EndRAT RftRAT RemcosRAT
Indicators of Compromise (7 / 14 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 01022facb38cf60b052e65a682f4a127 — 2026-03-18
FileHash-MD5 148405ff05bf15a6a053e4e7c1795d40 — 2026-03-18
FileHash-MD5 2e1b0ac49313873a0e0b982c591a5264 — 2026-03-18
FileHash-MD5 3288c284561055044c489567fd630ac2 — 2026-03-18
FileHash-MD5 461ade40b800ae80a40985594e1ac236 — 2026-03-18
FileHash-MD5 61f65bd593ea0e52ac0dfdc6bc9cd73a — 2026-03-18
FileHash-MD5 7dc50e8af0070e544bff5299405cd3b9 — 2026-03-18
References (1)
↗ https://www.genians.co.kr/en/blog/threat_intelligence/kakaotalk