`8879de48468dd650152cb3aa150349db69ec33c4`

8879de48468dd650152cb3aa150349db69ec33c4 is a file hash that one published source reports in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from 0xthreatintel. The report is dated 2021-12-03.

file hash APT37 MATCHED IN SOURCE

Listed as 8879de48468d...

First seen 2021-12-03 · last seen 2021-12-03

Source

…(from decoded powershell script) 211.115.92.200 VB script : Microsoft.vbs hashes: MD5 72e5b8ea33aeb083631d1e8b302e76af SHA1: 8879de48468dd650152cb3aa150349db69ec33c4 SHA256: c69f4052c34efc8b0b51892c53488c0a04ed68e748a1c5297500c1ad3e0ad94d DNS requests domain ljs5950.cafe24.com Connections ip…
APT37 targets Journalists & Security Researchers — 0xthreatintel · under “IOCs:” · published 2021-12-03 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: APT37 targets Journalists & Security Researchers

0xthreatintel lists 17 other indicators in this source. 12 are shown, chosen across types.

All 18 indicators from this source