`aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868`

aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 is a file hash that 3 published sources report in connection with Lazarus Group and unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from Group-IB, Cyble and Symantec. The reports are dated 2023-03-31.

file hash Lazarus GroupDPRK (cluster unattributed) MATCHED IN SOURCE

Listed as aa124a4b4df1...

First seen 2023-03-31 · last seen 2023-03-31

Sources

…f3d4144860ca10ba60f7ef4d176cc736 bea77d1e59cf18dce22ad9a2fad52948fd7a9efa aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 11bc82a9bd8297bd0823bce5d6202082 894e7d4ffd764bb458809c7f0643694b036ead30…
36gate: supply chain attack | Group-IB Blog — Group-IB · under “Indicators of compromise” · published 2023-03-31 · pulled 2026-09-11
…Compromise (IOCs) Indicators Indicator Type Description f3d4144860ca10ba60f7ef4d176cc736 bea77d1e59cf18dce22ad9a2fad52948fd7a9efa aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 MD5 SHA1 SHA256 3CX Windows Installer…
Cyble - A Comprehensive Analysis Of The 3CX Attack — Cyble · under “Indicators of Compromise (IOCs)” · published 2023-03-31 · pulled 2026-09-11
…In two variants analyzed by Symantec (SHA256: aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 and 59e1edf4d82fae4978e97512b0331b7eb21dd4b838b850ba46794d9c7a2c0983), the clean executable was used to load a malicious DLL named…
3CX: Supply Chain Attack Affects Thousands of Users Worldwide | SECURITY.COM — Symantec · under “Attack chain” · published 2023-03-31 · pulled 2026-09-11

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: 36gate: supply chain attack | Group-IB Blog

Group-IB lists 46 other indicators in this source. 5 are shown, chosen across types.

All 47 indicators from this source

Cited by the same report: Cyble - A Comprehensive Analysis Of The 3CX Attack

Cyble lists 60 other indicators in this source. 4 are shown, chosen across types.

All 61 indicators from this source

Cited by the same report: 3CX: Supply Chain Attack Affects Thousands of Users Worldwide | SECURITY.COM

Symantec lists 2 other indicators in this source.