`087407551649376d90d1743bac75aac8`

087407551649376d90d1743bac75aac8 is a file hash that one published source reports in connection with APT38 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kaspersky Securelist. The report is dated 2022-12-27.

file hash APT38 MATCHED IN SOURCE

Listed as 087407551649...

First seen 2022-12-27 · last seen 2022-12-27

Source

…This malware (MD5 087407551649376d90d1743bac75aac8 ) spawns a fake password file while fetching a remote payload and executing it.…
BlueNoroff introduces new methods bypassing MoTW | Securelist — Kaspersky Securelist · under “Updated method #2: Scripts and novel downloader” · published 2022-12-27 · pulled 2026-09-28

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: BlueNoroff introduces new methods bypassing MoTW | Securelist

Kaspersky Securelist lists 8 other indicators in this source.