`a03d13c9825e150810e6e6aaf053d71ec5a53b86581414dd982a74d4a8bc5475`

a03d13c9825e150810e6e6aaf053d71ec5a53b86581414dd982a74d4a8bc5475 is a file hash that 2 published sources report in connection with Lazarus Group, APT38, Andariel and Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Unit 42 and Picus Security. The earliest of those reports is dated 2024-09-09 and the most recent 2024-12-27.

file hash Lazarus Group APT38 Andariel Kimsuky MATCHED IN SOURCE

Listed as a03d13c9825e...

First seen 2024-09-09 · last seen 2024-12-27

Sources

…689cfaa9319f3f7529a31472ecf6b2e0ca6891b736de009e0b6c2ebac958cc94 c6a48365c3db9761bd60981bdcdd87aced23d8e60067caa30fee501bf4b47b84 a03d13c9825e150810e6e6aaf053d71ec5a53b86581414dd982a74d4a8bc5475 KANDYKORN SHA256 hash: 927b3564c1cf884d2a05e1d7bd24362ce8563a1e9b85be776190ab7f8af192f6 SmoothOperator Malicious 3CX…
Threat Assessment: North Korean Threat Groups — Unit 42 · under “HLOADER” · published 2024-09-09 · pulled 2026-09-12
…973F7939EA03FD2C9663DAFC21BB968F56ED1B9A56B0284ACF73C3EE141C053C 99DBC6FE3C3E465052FCEFA1642861747DC9E069EEB244589B605BD710B1E0D1 A03D13C9825E150810E6E6AAF053D71EC5A53B86581414DD982A74D4A8BC5475 A64FA9F1C76457ECC58402142A8728CE34CCBA378C17318B3340083EEB7ACC67 B72CAAB78D164637FEA0937D7A94FC470579EC6BB4FA87DADB6F0FA7826E217C…
Exposing the Steps of the Kimsuky APT Group — Picus Security · under “SHA256 Hashes” · published 2024-12-27 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: Threat Assessment: North Korean Threat Groups

Unit 42 lists 41 other indicators in this source. 7 are shown, chosen across types.

All 42 indicators from this source

Cited by the same report: Exposing the Steps of the Kimsuky APT Group

Picus Security lists 26 other indicators in this source. 5 are shown, chosen across types.

All 27 indicators from this source