`aeee54a81032a6321a39566f96c822f5`

aeee54a81032a6321a39566f96c822f5 is a file hash that 3 published sources report in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kaspersky Securelist, CISA and Qihoo360. The earliest of those reports is dated 2020-01-08 and the most recent 2026-10-18.

file hash Lazarus Group MATCHED IN SOURCE

Listed as aeee54a81032...

First seen 2020-01-08 · last seen 2026-10-18

Sources

…WbBot.pkg BitcoinTrader.pkg Packaging time 2018-07-12 14:09:33 2018-11-05 6:11:38 2018-12-19 0:15:19 Malicious mach-o hash aeee54a81032a6321a39566f96c822f5 b63e8d4277b190e2e3f5236f07f89eee bb04d77bda3ae9c9c3b6347f7aef19ac C2 server www.celasllc.com/checkupdate.php…
Operation AppleJeus Sequel | Securelist — Kaspersky Securelist · under “Life after Operation AppleJeus” · published 2020-01-08 · pulled 2026-09-11
…Size 50320 bytes Type Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|WEAK_DEFINES|BINDS_TO_WEAK|PIE> MD5 aeee54a81032a6321a39566f96c822f5 SHA1 53aa0971eb5d53ed242764ebfc89ad591a5211b2 SHA256 5e54bccbd4d93447e79cda0558b0b308a186c2be571c739e5460a3cb6ef665c0 SHA512…
MAR-10322463-1.v1 - AppleJeus: Celas Trade Pro | CISA — CISA · under “Details” · published 2021-02-17 · pulled 2026-09-12
…It can also intercept the site to prevent further spread of the malicious software. IOC Md5 aeee54a81032a6321a39566f96c822f5 b054a7382adf6b774b15f52d971f3799 C&C https://www.celasllc.com/checkupdate.php Posted in: APT , Threat…
Brief Analysis on APT Attack through Cryptocurrency Trading Software – 奇虎360技术博客 — Qihoo360 · under “Brief Analysis on APT Attack through Cryptocurrency Trading Software” · pulled 2026-10-02

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: Operation AppleJeus Sequel | Securelist

Kaspersky Securelist lists 15 other indicators in this source. 5 are shown, chosen across types.

All 16 indicators from this source

Cited by the same report: MAR-10322463-1.v1 - AppleJeus: Celas Trade Pro | CISA

CISA lists 26 other indicators in this source. 4 are shown, chosen across types.

All 27 indicators from this source