`b054a7382adf6b774b15f52d971f3799`

b054a7382adf6b774b15f52d971f3799 is a file hash that 2 published sources report in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from CISA and Qihoo360. The earliest of those reports is dated 2021-02-17 and the most recent 2026-10-18.

file hash Lazarus Group MATCHED IN SOURCE

Listed as b054a7382adf...

First seen 2021-02-17 · last seen 2026-10-18

Sources

…Name Updater.exe Size 173224 bytes Type PE32 executable (GUI) Intel 80386, for MS Windows MD5 b054a7382adf6b774b15f52d971f3799 SHA1 b4d43cd2d81d17dec523915c0fc61b4b29e62c58 SHA256 bdff852398f174e9eef1db1c2d3fefdda25fe0ea90a40a2e06e51b5c0ebd69eb SHA512…
MAR-10322463-1.v1 - AppleJeus: Celas Trade Pro | CISA — CISA · under “Details” · published 2021-02-17 · pulled 2026-09-12
…It can also intercept the site to prevent further spread of the malicious software. IOC Md5 aeee54a81032a6321a39566f96c822f5 b054a7382adf6b774b15f52d971f3799 C&C https://www.celasllc.com/checkupdate.php Posted in: APT , Threat Intelligence…
Brief Analysis on APT Attack through Cryptocurrency Trading Software – 奇虎360技术博客 — Qihoo360 · under “Brief Analysis on APT Attack through Cryptocurrency Trading Software” · pulled 2026-10-02

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: MAR-10322463-1.v1 - AppleJeus: Celas Trade Pro | CISA

CISA lists 26 other indicators in this source. 7 are shown, chosen across types.

All 27 indicators from this source

Cited by the same report: Brief Analysis on APT Attack through Cryptocurrency Trading Software – 奇虎360技术博客

Qihoo360 lists 1 other indicator in this source.