#ParsedReport #CompletenessLow
18-09-2026

Private HTS program distributing ransomware

https://asec.ahnlab.com/ko/95464/

Report completeness: Low

Threats:
Quasar_rat
Shadow_copies_delete_technique

Victims:
Investors, Financial investment sector

Geo:
Switzerland

ChatGPT TTPs:
do not use without manual check
T1036, T1071.002, T1105, T1204.002, T1486

IOCs:
File: 9
Domain: 1

Soft:
KakaoTalk, Telegram

Algorithms:
md5, zip, rsa-2048, aes-256

Functions:
Main

Languages:
groovy, lua, scala, swift, php, rust, java

Platforms:
x86