`0efbd18c77479b458078521c18bdad84852b71250122a17cb8105c10d3df38d4`

0efbd18c77479b458078521c18bdad84852b71250122a17cb8105c10d3df38d4 is a file hash that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Synaptic Security. The report is dated 2026-06-29.

file hash Kimsuky MATCHED IN SOURCE

Listed as 0efbd18c7747...

First seen 2026-06-29 · last seen 2026-06-29

Source

…analysis i am using Malwarebox Tooling for most of my work. Everything started with a suspicious CHM sample arriving in MANTIS . SHA256: 0efbd18c77479b458078521c18bdad84852b71250122a17cb8105c10d3df38d4 Infection overview The observed chain can be summarized as follows: Review.chm |_ HTML Help ActiveX shortcut |_ powershell.exe…
Inside Kimsuky’s CHM Tradecraft: Multi-Stage Execution and Selective Payload Delivery — Synaptic Security · under “Inside Kimsuky’s CHM Tradecraft: Multi-Stage Execution and Selective Payload Delivery” · published 2026-06-29 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: Inside Kimsuky’s CHM Tradecraft: Multi-Stage Execution and Selective Payload Delivery

Synaptic Security lists 4 other indicators in this source.