`8ab3a5eaaf8c296080fadf56b265194681d7da5da7c02562953a4cb60e147423`

8ab3a5eaaf8c296080fadf56b265194681d7da5da7c02562953a4cb60e147423 is a file hash that 2 published sources report in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Group-IB and Volexity. The earliest of those reports is dated 2023-03-30 and the most recent 2023-03-31.

file hash Lazarus Group MATCHED IN SOURCE

Listed as 8ab3a5eaaf8c...

First seen 2023-03-30 · last seen 2023-03-31

Sources

…7faea2b01796b80d180399040bb69835 3b3e778b647371262120a523eb873c20bb82beaf 8ab3a5eaaf8c296080fadf56b265194681d7da5da7c02562953a4cb60e147423 cad1120d91b812acafef7175f949dd1b09c6c21a 6426fe4dc604c7f1784ed1d48ab4ffc8 3b88cda62cdd918b62ef5aa8c5a73a46f176d18b…
36gate: supply chain attack | Group-IB Blog — Group-IB · under “Indicators of compromise” · published 2023-03-31 · pulled 2026-09-11
…File Type application/x-dosexec MD5 7faea2b01796b80d180399040bb69835 SHA1 3b3e778b647371262120a523eb873c20bb82beaf SHA256 8ab3a5eaaf8c296080fadf56b265194681d7da5da7c02562953a4cb60e147423 The DLL retrieves the hostname, domain name, and OS version.…
3CX Supply Chain Compromise Leads to ICONIC Incident | Volexity — Volexity · under “Stage #2: ICONIC Stealer” · published 2023-03-30 · pulled 2026-09-11

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: 36gate: supply chain attack | Group-IB Blog

Group-IB lists 46 other indicators in this source. 7 are shown, chosen across types.

All 47 indicators from this source

Cited by the same report: 3CX Supply Chain Compromise Leads to ICONIC Incident | Volexity

Volexity lists 23 other indicators in this source. 5 are shown, chosen across types.

All 24 indicators from this source