2bfbf8ce47585aa86b1ab90ff109fd57

2bfbf8ce47585aa86b1ab90ff109fd57 is a file hash that 2 published sources report in connection with Konni and Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from ESTsecurity ALYac. The earliest of those reports is dated 2019-05-15 and the most recent 2019-06-10.

file hash KonniKimsuky MATCHED IN SOURCE

Listed as 2bfbf8ce4758...

First seen 2019-05-15 · last seen 2019-06-10

Sources

  • …MD5 0eb6090397c74327cd4d47819f724953 C2 filer1.1apps.com File Name 젠트리온 지갑 관련자료.doc (BlueSky) MD5 2bfbf8ce47585aa86b1ab90ff109fd57 C2 filer2.1apps.com 한국어를 구사하는 대표적인 APT 위협 그룹 중에 하나인 'Konni' 조직은 아직도 베일에 쌓여있습니다.…
    한국어 구사 Konni 조직, 블루 스카이 작전 'Amadey' 러시아 봇넷 활용 — ESTsecurity ALYac · under “본문” · published 2019-05-15 · pulled 2026-09-12
  • …MD5 0eb6090397c74327cd4d47819f724953 C2 filer1.1apps.com File Name 젠트리온 지갑 관련자료.doc (BlueSky) MD5 2bfbf8ce47585aa86b1ab90ff109fd57 C2 filer2.1apps.com Sub Document_Open() Dim nResult As Long Dim sCmdLine As String With…
    [스페셜 리포트] APT 캠페인 'Konni' & 'Thallium(Kimsuky)' 조직의 공통점 발견 — ESTsecurity ALYac · under “본문” · published 2019-06-10 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: 한국어 구사 Konni 조직, 블루 스카이 작전 'Amadey' 러시아 봇넷 활용

ESTsecurity ALYac lists 2 other indicators in this source.

Cited by the same report: [스페셜 리포트] APT 캠페인 'Konni' & 'Thallium(Kimsuky)' 조직의 공통점 발견

ESTsecurity ALYac lists 11 other indicators in this source. 10 are shown, chosen across types.

All 12 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.