This is the analysis report on the cases of the TTPs that the attackers use ransomware that is completely customized for each company.

An English version of the report can be found here.
https://thorcert.notion.site/ENG-TTPs-8-Operation-GWISIN-Analysis-on-Fully-Customized-Ransomware-Attack-Strategies-d17281d2de6143b18aa070e424122ef5

Also you could find original Korean version of the report here:
https://thorcert.notion.site/TTPs-8-Operation-GWISIN-c3483353d20241b3a313fa4a8726302a