6588d262529dc372c400bef8478c2eec

6588d262529dc372c400bef8478c2eec is a file hash that 4 published sources report in connection with unclustered DPRK and Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Objective-see and CISA. The earliest of those reports is dated 2019-12-03 and the most recent 2021-02-17.

file hash DPRK (cluster unattributed)Lazarus Group MATCHED IN SOURCE

Listed as 6588d262529d...

First seen 2019-12-03 · last seen 2021-02-17

Sources

  • …Application Recently, Dinesh_Devadoss posted a tweet about another Lazarus group macOS trojan: Another #Lazarus #macOS #trojan md5: 6588d262529dc372c400bef8478c2eec https://unioncrypto.vip/ Contains code: Loads Mach-O from memory and execute it / Writes to a file and execute it @patrickwardle…
    The Mac Malware of 2019 — Objective-see · under “👾 Lazarus Loader (aka macloader )” · published 2020-01-01 · pulled 2026-09-12
  • …Dinesh_Devadoss posted a tweet about another Lazarus group macOS trojan: Another #Lazarus #macOS #trojan md5: 6588d262529dc372c400bef8478c2eec https://unioncrypto.vip/ Contains code: Loads Mach-O from memory and execute it / Writes to a file and execute it @patrickwardle…
    Lazarus Group Goes 'Fileless' — Objective-see · under “Background” · published 2019-12-03 · pulled 2026-10-01
  • …don’t infect yourself! Background Recently a new piece of macOS malware was discovered: Another #Lazarus #macOS #trojan md5: 6588d262529dc372c400bef8478c2eec https://unioncrypto.vip/ Contains code: Loads Mach-O from memory and execute it / Writes to a file and execute it @patrickwardle…
    Weaponizing a Lazarus Group Implant — Objective-see · under “Background” · published 2020-02-22 · pulled 2026-10-01
  • …Name UnionCryptoTrader.dmg Size 20911661 bytes Type zlib compressed data MD5 6588d262529dc372c400bef8478c2eec SHA1 06d9f835efd1c05323f6a3abdf66e6be334e47c4 SHA256 2ab58b7ce583402bf4cbc90bee643ba5f9503461f91574845264d4f7e3ccb390 SHA512…
    MAR-10322463-3.v1 - AppleJeus: Union Crypto | CISA — CISA · under “Details” · published 2021-02-17 · pulled 2026-10-18

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: The Mac Malware of 2019

Objective-see lists 5 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.