← All actor clusters

ef1a8f66351d03413ed2c7d499ee5164

ef1a8f66351d03413ed2c7d499ee5164 is a file hash that one published source reports in connection with Konni, Kimsuky and APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The report is dated 2025-11-09.

file hash KonniKimsukyAPT37 MATCHED IN SOURCE

Listed as ef1a8f66351d...

First seen 2025-11-09 · last seen 2025-11-09

Source

• …73 56c7b448dbc37aa50eb1c2a6475aca5e 99ee7852b8041a540fdb74b3784d0409 8230af6642f5f1927bbbbc7fd6e5427f b0eba111b570bb1c93ca1f48557d265b ef1a8f66351d03413ed2c7d499ee5164 f7363c5cfd6fa24a86e542fcd05283e8 f6800836d55d049fe79e3d47d54e1119 Domain…

  국가 배후 위협 조직의 안드로이드 디바이스 대상 원격 초기화 전술 — Genians · under “MD5” · published 2025-11-09 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: 국가 배후 위협 조직의 안드로이드 디바이스 대상 원격 초기화 전술

Genians lists 22 other indicators in this source. 12 are shown, chosen across types.

• 048e1698c4b711d1652df4bf4be04f9e file hash
• 09b91626507a62121a4bdb08debb3ed9 file hash
• 25e38d618f38b3218c3252cf0d22c969 file hash
• 38f8fd9e8d27ae665b3ac0f56492f6c4 file hash
• f6800836d55d049fe79e3d47d54e1119 file hash
• f7363c5cfd6fa24a86e542fcd05283e8 file hash
• 192.109.119.113 IP address
• 212.118.52.168 IP address
• 38.180.148.108 IP address
• 77.246.101.72 IP address
• 77.246.108.96 IP address
• 89.110.83.245 IP address

All 23 indicators from this source