← Remote Workers

bea77d1e59cf18dce22ad9a2fad52948fd7a9efa

bea77d1e59cf18dce22ad9a2fad52948fd7a9efa is a file hash that 3 published sources report in connection with Lazarus Group, Contagious Interview and unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from Group-IB, ReversingLabs and Cyble. The earliest of those reports is dated 2023-03-30 and the most recent 2023-03-31.

file hash Lazarus GroupContagious InterviewDPRK (cluster unattributed) MATCHED IN SOURCE

Listed as bea77d1e59cf...

First seen 2023-03-30 · last seen 2023-03-31

Sources

• …7986bbaee8940da11ce089383521ab420c443ab7b15ed42aed91fd31ce833896 f3d4144860ca10ba60f7ef4d176cc736 bea77d1e59cf18dce22ad9a2fad52948fd7a9efa aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 11bc82a9bd8297bd0823bce5d6202082…

  36gate: supply chain attack | Group-IB Blog — Group-IB · under “Indicators of compromise” · published 2023-03-31 · pulled 2026-09-11

• …Indicators of Compromise (IOC) list filename sha1 3cxdesktopapp-18.12.407.msi bea77d1e59cf18dce22ad9a2fad52948fd7a9efa 3cxdesktopapp-18.12.416.msi bfecb8ce89a312d2ef4afc64a63847ae11c6f69e 3CXDesktopApp-18.12.416-full.nupkg…

  Red flags flew over software supply chain-compromised 3CX update | RL Blog — ReversingLabs · under “Indicators of Compromise (IOC) list” · published 2023-03-30 · pulled 2026-09-11

• …Layer Protocol Indicators of Compromise (IOCs) Indicators Indicator Type Description f3d4144860ca10ba60f7ef4d176cc736 bea77d1e59cf18dce22ad9a2fad52948fd7a9efa aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 MD5 SHA1 SHA256 3CX Windows Installer…

  Cyble - A Comprehensive Analysis Of The 3CX Attack — Cyble · under “Indicators of Compromise (IOCs)” · published 2023-03-31 · pulled 2026-09-11

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: 36gate: supply chain attack | Group-IB Blog

Group-IB lists 46 other indicators in this source. 5 are shown, chosen across types.

• bf939c9c261d27ee7bb92325cc588624fca75429 file hash
• bfecb8ce89a312d2ef4afc64a63847ae11c6f69e file hash
• c485674ee63ec8d4e8fde9800788175a8b02d3f9416d0e763360fff7f8eb4e02 file hash
• ca8c0385ce2b8bdd19423c8b98a5924b file hash
• d5101c3b86d973a848ab7ed79cd11e5a file hash

All 47 indicators from this source

Cited by the same report: Red flags flew over software supply chain-compromised 3CX update | RL Blog

ReversingLabs lists 2 other indicators in this source. 1 are shown, chosen across types.

• f7f1b34c2770d83e2250e19c8425a4bec56617fd file hash

All 3 indicators from this source

Cited by the same report: Cyble - A Comprehensive Analysis Of The 3CX Attack

Cyble lists 60 other indicators in this source. 6 are shown, chosen across types.

• c13d49ed325dec9551906bafb6de9ec947e5ff936e7e40877feb2ba4bb176396 file hash
• c62dce8a77d777774e059cf1720d77c47b97d97c3b0cf43ade5d96bf724639bd file hash
• caa77bcd0a1a6629ba1f3ce8d1fc5451d83d0352 file hash
• cad1120d91b812acafef7175f949dd1b09c6c21a file hash
• d0f1984b4fe896d0024533510ce22d71e05b20bad74d53fae158dc752a65782e file hash
• https://github.com/iconstorages GitHub account

All 61 indicators from this source