61367c3a1d4c9ccaee568157bc4cf2feb997161ed3395878a448d8a2bf67dfa9

61367c3a1d4c9ccaee568157bc4cf2feb997161ed3395878a448d8a2bf67dfa9 is a file hash that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from S2W. The report is dated 2021-07-09.

file hash Lazarus Group MATCHED IN SOURCE

Listed as 61367c3a1d4c...

First seen 2021-07-09 · last seen 2021-07-09

Source

  • …Type : x86, dll NppAStyle.dll - MD5 : 98151ba9f3e0a55bba16c58428b3a178 - SHA256 : 61367c3a1d4c9ccaee568157bc4cf2feb997161ed3395878a448d8a2bf67dfa9 - Type : x64, dll - 1번 악성코드와 동일한 문자열 테이블 사용 추가 악성코드 다운로드지 grandgolf.co.kr/html/facilities/facilities_01_06.asp? product_field=racket…
    Analysis of Lazarus malware abusing Non-ActiveX Module in South Korea — S2W · under “Appendix 1 : IoC” · published 2021-07-09 · pulled 2026-10-02

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: Analysis of Lazarus malware abusing Non-ActiveX Module in South Korea

S2W lists 3 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.