`52f173a760db5d68e52ba1f1ac51c023`

52f173a760db5d68e52ba1f1ac51c023 is a file hash that one published source reports in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Sophos. The report is dated 2026-03-23.

file hash Contagious Interview MATCHED IN SOURCE

Listed as 52f173a760db...

First seen 2026-03-23 · last seen 2026-03-23

Source

…URL NICKEL ALLEY malware staging server https://astraluck-vercel.vercel.app/api/dat URL NICKEL ALLEY malware staging server 52f173a760db5d68e52ba1f1ac51c023 MD5 hash VBScript file used by NICKEL ALLEY (start.vbs) 2151d4d7dc8d6dca7242928a17ea3fb14f58ccef SHA1 hash VBScript file used by NICKEL…
NICKEL ALLEY strategy: Fake it ‘til you make it — Sophos · under “Detections and threat indicators” · published 2026-03-23 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: NICKEL ALLEY strategy: Fake it ‘til you make it

Sophos lists 13 other indicators in this source. 12 are shown, chosen across types.

All 14 indicators from this source