`60aaafce354ae5e0b8115729464a8b24`

60aaafce354ae5e0b8115729464a8b24 is a file hash that 2 published sources report in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Break Glass Intelligence. The earliest of those reports is dated 2026-03-12 and the most recent 2026-03-17.

file hash Lazarus Group MATCHED IN SOURCE

Listed as 60aaafce354a...

First seen 2026-03-12 · last seen 2026-03-17

Sources

…The Ransomware: gaze.exe Property Value SHA-256 15208030eda48b3786f7d85d756d2bd6596ef0f465d9c8509a8f02c53fad9a10 MD5 60aaafce354ae5e0b8115729464a8b24 SHA-1 53948d9596ebab5c4cf2ac04e7fb70c429e0cbbf Size 638,976 bytes (624 KB) Architecture x86 (32-bit) Compiler MSVC (VS2019…
When Nation-States Become Ransomware Affiliates: Lazarus Group Deploys Medusa via a Custom IME-Based Loader — Break Glass Intelligence · under “The Ransomware: gaze.exe” · published 2026-03-17 · pulled 2026-09-12
…-- gaze.exe (Medusa Ransomware) Hash Type Value SHA-256 15208030eda48b3786f7d85d756d2bd6596ef0f465d9c8509a8f02c53fad9a10 MD5 60aaafce354ae5e0b8115729464a8b24 SHA-1 53948d9596ebab5c4cf2ac04e7fb70c429e0cbbf Imphash 82a8292007e682f1a127ba8dcebfae96 Rich Hash c8040dd3ff2f4afd042efd4ebe1a43c6…
Lazarus Group Caught Running Medusa Ransomware: XOR-Decoded Config Exposes Tor C2, IME-Based Loader, and a 7-Month Intrusion Timeline — Break Glass Intelligence · under “File Indicators -- gaze.exe (Medusa Ransomware)” · published 2026-03-12 · pulled 2026-10-01

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: When Nation-States Become Ransomware Affiliates: Lazarus Group Deploys Medusa via a Custom IME-Based Loader

Break Glass Intelligence lists 10 other indicators in this source. 7 are shown, chosen across types.

All 11 indicators from this source

Cited by the same report: Lazarus Group Caught Running Medusa Ransomware: XOR-Decoded Config Exposes Tor C2, IME-Based Loader, and a 7-Month Intrusion Timeline

Break Glass Intelligence lists 8 other indicators in this source. 2 are shown, chosen across types.

All 9 indicators from this source