← All actor clusters

f364b46d8aafff67271d350b8271505a

f364b46d8aafff67271d350b8271505a is a file hash that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kaspersky Securelist. The report is dated 2020-07-22.

file hash Lazarus Group MATCHED IN SOURCE

Listed as f364b46d8aaf...

First seen 2020-07-22 · last seen 2020-07-22

Source

• …intelreports@kaspersky.com Indicators of compromise File Hashes (malicious documents, Trojans, emails, decoys) Windows Loader f364b46d8aafff67271d350b8271505a 85dcea03016df4880cebee9a70de0c02 1060702fe4e670eda8c0433c5966feee 7b068dfbea310962361abf4723332b3a 8e665562b9e187585a3f32923cc1f889 6c…

  MATA: Multi-platform targeted malware framework — Kaspersky Securelist · under “File Hashes (malicious documents, Trojans, emails, decoys)” · published 2020-07-22 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: MATA: Multi-platform targeted malware framework

Kaspersky Securelist lists 18 other indicators in this source. 12 are shown, chosen across types.

• 104.232.71.7 IP address
• 107.172.197.175 IP address
• 108.170.31.81 IP address
• 111.90.146.105 IP address
• 111.90.148.132 IP address
• 172.81.132.41 IP address
• 172.93.184.62 IP address
• 172.93.201.219 IP address
• 185.62.58.207 IP address
• 192.210.239.122 IP address
• 198.180.198.6 IP address
• 209.90.234.34 IP address

All 19 indicators from this source