675928d7a0a28f70740b7eedf021de82

675928d7a0a28f70740b7eedf021de82 is a file hash that one published source reports in connection with Contagious Interview, Lazarus Group and APT38 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Group-IB. The report is dated 2024-09-04.

file hash Contagious InterviewLazarus GroupAPT38 MATCHED IN SOURCE

Listed as 675928d7a0a2...

First seen 2024-09-04 · last seen 2024-09-04

Source

  • …a scheduled task for it. ad.anynet.pwd_hash=1bbb953890e752a6898afe71121583881c3eebd2365df7d985c52dda0bd89e14 ad.anynet.pwd_salt=675928d7a0a28f70740b7eedf021de82 ad.anynet.token_salt=2c5e45a85a8eed94ffed26a7c3b0790e Figure 13: Lines added for AnyDesk service.conf file Steals data from Microsoft…
    APT Lazarus: Eager Crypto Beavers, Video calls and Games | Group-IB Blog — Group-IB · under “BeaverTail – Python & CivetQ” · published 2024-09-04 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: APT Lazarus: Eager Crypto Beavers, Video calls and Games | Group-IB Blog

Group-IB lists 33 other indicators in this source. 12 are shown, chosen across types.

All 34 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.