`b70e66d387e42f5f04b69b9eb15306036702ab8a50b16f5403289b5388292db9`

b70e66d387e42f5f04b69b9eb15306036702ab8a50b16f5403289b5388292db9 is a file hash that 2 published sources report in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from CISA and Hvs-consulting. The earliest of those reports is dated 2020-08-19 and the most recent 2020-12-15.

file hash Lazarus Group MATCHED IN SOURCE

Listed as b70e66d387e4...

First seen 2020-08-19 · last seen 2020-12-15

Sources

…for MS Windows, UPX compressed MD5 c627db421adaaa320d3ac42396c89f8a SHA1 dcf95cd96203e794724fc14e454e63fba9afe82a SHA256 b70e66d387e42f5f04b69b9eb15306036702ab8a50b16f5403289b5388292db9 SHA512…
MAR-10295134-1.v1 – North Korean Remote Access Trojan: BLINDINGCAN | CISA — CISA · under “Details” · published 2020-08-19 · pulled 2026-09-12
…= "https://creativecommons.org/licenses/by-nc/4.0/" author = "Marc Stroebel" date = "2020-12-15" hash = "b70e66d387e42f5f04b69b9eb15306036702ab8a50b16f5403289b5388292db9" reference1 = "https://www.hvs-consulting.de/media/downloads/ThreatReport-Lazarus.pdf" reference2 =…
Greetings from Lazarus — Hvs-consulting · published 2020-12-15 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: MAR-10295134-1.v1 – North Korean Remote Access Trojan: BLINDINGCAN | CISA

CISA lists 55 other indicators in this source. 7 are shown, chosen across types.

All 56 indicators from this source

Cited by the same report: Greetings from Lazarus

Hvs-consulting lists 6 other indicators in this source. 5 are shown, chosen across types.

All 7 indicators from this source