42e4a9aeff3744bbbc0e82fd5b93eb9b078460d8f40e0b61b27b699882f521be

42e4a9aeff3744bbbc0e82fd5b93eb9b078460d8f40e0b61b27b699882f521be is a file hash that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Hvs-consulting. The report is dated 2020-12-15.

file hash Lazarus Group MATCHED IN SOURCE

Listed as 42e4a9aeff37...

First seen 2020-12-15 · last seen 2020-12-15

Source

  • …date = "2020-12-15" reference = "https://www.hvs-consulting.de/media/downloads/ThreatReport-Lazarus.pdf" hash = "42e4a9aeff3744bbbc0e82fd5b93eb9b078460d8f40e0b61b27b699882f521be" strings : $s1 = ".?AVCEncryption@@" fullword ascii $s2 = "afrfa" condition : uint16 ( 0 ) == 0x5a4d…
    Greetings from Lazarus — Hvs-consulting · published 2020-12-15 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: Greetings from Lazarus

Hvs-consulting lists 6 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.