16a8aaaf2e3125668e6bfb1705a065f9

16a8aaaf2e3125668e6bfb1705a065f9 is a file hash that 4 published sources report in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from AhnLab ASEC and Genians. The earliest of those reports is dated 2025-08-03 and the most recent 2025-08-13.

file hash APT37 MATCHED IN SOURCE

Listed as 16a8aaaf2e31...

First seen 2025-08-03 · last seen 2025-08-13

Sources

  • …확인된 디코이 파일 MD5 0191d9588af4e78211c55d16726fbc8c 08c98fb0b7e0e1cffe8e8d34e2379fd6 0e7000ecc88de21ba0b8c2e3f4bf19e6 16a8aaaf2e3125668e6bfb1705a065f9 23489a6977c905a88d59998d1e42e8d0 URL…
    2025년 7월 APT 공격 동향 보고서(국내) - ASEC — AhnLab ASEC · under “Type B” · published 2025-08-13 · pulled 2026-09-11
  • …to the attached file. MD5 0191d9588af4e78211c55d16726fbc8c 08c98fb0b7e0e1cffe8e8d34e2379fd6 0e7000ecc88de21ba0b8c2e3f4bf19e6 16a8aaaf2e3125668e6bfb1705a065f9 23489a6977c905a88d59998d1e42e8d0 URL…
    July 2025 APT Attack Trends Report (South Korea) - ASEC — AhnLab ASEC · under “Type B” · published 2025-08-13 · pulled 2026-09-11
  • …b9 d5fe744b9623a0cc7f0ef6464c5530da f6d72abf9ca654a20bbaf23ea1c10a55 fd9099005f133f95a5b699ab30a2f79b 5ed95cde6c29432a4f7dc48602f82734 16a8aaaf2e3125668e6bfb1705a065f9 64d729d0290e2c8ceaa6e38fa68e80e9 443a00feeb3beaea02b2fbcd4302a3c9 e13c3a38ca58fb0fa9da753e857dd3d5 e4813c34fe2327de1a94c51e630213d1…
    RoKRAT Shellcode and Steganographic Threats: Analysis and EDR Response Strategies — Genians · under “MD5” · published 2025-08-03 · pulled 2026-09-11
  • …b9 d5fe744b9623a0cc7f0ef6464c5530da f6d72abf9ca654a20bbaf23ea1c10a55 fd9099005f133f95a5b699ab30a2f79b 5ed95cde6c29432a4f7dc48602f82734 16a8aaaf2e3125668e6bfb1705a065f9 64d729d0290e2c8ceaa6e38fa68e80e9 443a00feeb3beaea02b2fbcd4302a3c9 e13c3a38ca58fb0fa9da753e857dd3d5 e4813c34fe2327de1a94c51e630213d1…
    RoKRAT 셸코드 및 스테가노그래피 기반 위협 분석과 EDR 대응 방안 — Genians · under “MD5” · published 2025-08-03 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: 2025년 7월 APT 공격 동향 보고서(국내) - ASEC

AhnLab ASEC lists 7 other indicators in this source. 5 are shown, chosen across types.

All 8 indicators from this source

Cited by the same report: July 2025 APT Attack Trends Report (South Korea) - ASEC

AhnLab ASEC lists 7 other indicators in this source. 2 are shown, chosen across types.

All 8 indicators from this source

Cited by the same report: RoKRAT Shellcode and Steganographic Threats: Analysis and EDR Response Strategies

Genians lists 15 other indicators in this source. 5 are shown, chosen across types.

All 16 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.