`5b03294b72c0caa5fb20e7817002c600645eb475`

5b03294b72c0caa5fb20e7817002c600645eb475 is a file hash that 2 published sources report in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Volexity and ESET. The earliest of those reports is dated 2022-12-01 and the most recent 2026-11-09.

file hash Lazarus Group MATCHED IN SOURCE

Listed as 5b03294b72c0...

First seen 2022-12-01 · last seen 2026-11-09

Sources

…protocol. Name(s) E57D8443104825AB22743C78B8F3AA Size 116224 Bytes MD5 76111d9780b2d0b5adee61cf752d937e SHA1 5b03294b72c0caa5fb20e7817002c600645eb475 SHA256 9352625b3e6a3c998e328e11ad43efb5602fe669aed9c9388af5f55fadfedc78 All strings and API calls are obfuscated using a custom…
₿uyer ₿eware: Fake Cryptocurrency Applications Serving as Front for AppleJeus Malware | Volexity — Volexity · under “AppleJeus Malware” · published 2022-12-01 · pulled 2026-09-11
…date = "2023-03-31" hash = "3B88CDA62CDD918B62EF5AA8C5A73A46F176D18B" hash = "CAD1120D91B812ACAFEF7175F949DD1B09C6C21A" hash = "5B03294B72C0CAA5FB20E7817002C600645EB475" hash = "7491BD61ED15298CE5EE5FFD01C8C82A2CDB40EC" condition: pe.rich_signature.toolid(259, 30818) == 9 and…
Linux malware strengthens links between Lazarus and the 3CX supply-chain attack — ESET · under “Appendix” · published 2023-04-20 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: ₿uyer ₿eware: Fake Cryptocurrency Applications Serving as Front for AppleJeus Malware | Volexity

Volexity lists 9 other indicators in this source. 7 are shown, chosen across types.

All 10 indicators from this source

Cited by the same report: Linux malware strengthens links between Lazarus and the 3CX supply-chain attack

ESET lists 14 other indicators in this source. 5 are shown, chosen across types.

All 15 indicators from this source