a2d3c41e6812044573a939a51a22d659ec32aea00c26c1a2fdf7466f5c7e1ee9
a2d3c41e6812044573a939a51a22d659ec32aea00c26c1a2fdf7466f5c7e1ee9 is a file hash
that one published source reports
in connection with APT38 activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Microsoft.
The report is dated 2022-12-06.
file hash APT38 MATCHED IN SOURCE
Listed as a2d3c41e6812...
Source
-
…used to trick the user to enable macros and not raise suspicion. Extracted worksheet The second Excel file, VSDB688.tmp (Sha256: a2d3c41e6812044573a939a51a22d659ec32aea00c26c1a2fdf7466f5c7e1ee9), is used to retrieve a PNG file that is parsed later by the macro to extract two executable files and the encrypted backdoor.…
DEV-0139 launches targeted attacks against the cryptocurrency industry | Microsoft Security Blog — Microsoft
Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.