`5bc4b606f4c0f8cd2e6787ae049bf5bb`

5bc4b606f4c0f8cd2e6787ae049bf5bb is a file hash that one published source reports in connection with Andariel activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kaspersky Securelist. The report is dated 2022-08-09.

file hash Andariel MATCHED IN SOURCE

Listed as 5bc4b606f4c0...

First seen 2022-08-09 · last seen 2022-08-09

Source

…Apart from the code similarity, the actor used 3Proxy tool (MD5 5bc4b606f4c0f8cd2e6787ae049bf5bb), and that tool was also previously employed by the Andariel/StoneFly/Silent Chollima group (MD5 95247511a611ba3d8581c7c6b8b1a38a).…
Andariel deploys DTrack and Maui ransomware | Securelist — Kaspersky Securelist · under “Attribution” · published 2022-08-09 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: Andariel deploys DTrack and Maui ransomware | Securelist

Kaspersky Securelist lists 11 other indicators in this source.