← All actor clusters

769383fc65d1386dd141c960c9970114547da0c2

769383fc65d1386dd141c960c9970114547da0c2 is a file hash that 3 published sources report in connection with Lazarus Group and unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from Group-IB, Volexity and Objective-See. The earliest of those reports is dated 2023-03-29 and the most recent 2023-03-31.

file hash Lazarus GroupDPRK (cluster unattributed) MATCHED IN SOURCE

Listed as 769383fc65d1...

First seen 2023-03-29 · last seen 2023-03-31

Sources

• …fad482ded2e25ce9e1dd3d3ecc3227af714bdfbbde04347dbc1b21d6a3670405 660ea9b8205fbd2da59fefd26ae5115c 769383fc65d1386dd141c960c9970114547da0c2 a64fa9f1c76457ecc58402142a8728ce34ccba378c17318b3340083eeb7acc67 82187ad3f0c6c225e2fba0c867280cc9…

  36gate: supply chain attack | Group-IB Blog — Group-IB · under “Indicators of compromise” · published 2023-03-31 · pulled 2026-09-11

• …Name(s) libffmpeg.dylib Size 4.7MB (4979136 Bytes) File Type Mach-O MD5 660ea9b8205fbd2da59fefd26ae5115c SHA1 769383fc65d1386dd141c960c9970114547da0c2 SHA256 a64fa9f1c76457ecc58402142a8728ce34ccba378c17318b3340083eeb7acc67 The macOS version does not use GitHub to retrieve its…

  3CX Supply Chain Compromise Leads to ICONIC Incident | Volexity — Volexity · under “macOS ICONIC Analysis” · published 2023-03-30 · pulled 2026-09-11

• …buried deep within the App’s Contents/Frameworks/Electron\ Framework.framework/Versions/A/Libraries directory. Its SHA-1 hash is 769383fc65d1386dd141c960c9970114547da0c2 , and it was uploaded to VirusTotal early today where it was not flagged by any of the AV engines as being malicious: A malicious…

  Objective-See's Blog — Objective-See · under “Triage” · published 2023-03-29 · pulled 2026-09-11

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: 36gate: supply chain attack | Group-IB Blog

Group-IB lists 46 other indicators in this source. 7 are shown, chosen across types.

• 7986bbaee8940da11ce089383521ab420c443ab7b15ed42aed91fd31ce833896 file hash
• 7a1d41c8e9e4bd19e0e360ec17e30c38e4f9ca0d file hash
• 7faea2b01796b80d180399040bb69835 file hash
• 82187ad3f0c6c225e2fba0c867280cc9 file hash
• 82a2dafd6ce594f2cf8588f32585c71be2180fc4cf9a144e300b1692f3de5807 file hash
• 8433a94aedb6380ac8d4610af643fb0e5220c5cb file hash
• 894e7d4ffd764bb458809c7f0643694b036ead30 file hash

All 47 indicators from this source

Cited by the same report: 3CX Supply Chain Compromise Leads to ICONIC Incident | Volexity

Volexity lists 23 other indicators in this source. 5 are shown, chosen across types.

• cliego.garcia@proton.me email address
• philip.je@proton.me email address
• remey.simpson@outlook.com email address
• https://github.com/neo23x0 GitHub account
• https://github.com/sigmahq GitHub account

All 24 indicators from this source