`97aaf130cfa251e5207ea74b2558293d`

97aaf130cfa251e5207ea74b2558293d is a file hash that 2 published sources report in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from CISA and BAE Systems. The earliest of those reports is dated 2017-10-16 and the most recent 2020-08-26.

file hash Lazarus Group MATCHED IN SOURCE

Listed as 97aaf130cfa2...

First seen 2017-10-16 · last seen 2020-08-26

Sources

…Size 232960 bytes Type PE32 executable (GUI) Intel 80386, for MS Windows MD5 97aaf130cfa251e5207ea74b2558293d SHA1 c7e7dd96fefca77bb1097aeeefef126d597126bd SHA256 9a776b895e93926e2a758c09e341accb9333edc1243d216a5e53f47c6043c852 SHA512…
MAR-10301706-2.v1 - North Korean Remote Access Tool: VIVACIOUSGIFT | CISA — CISA · under “Details” · published 2020-08-26 · pulled 2026-09-12
…b27881f59c8d8cc529fa80a58709db36 3c9e71400b72cc0213c9c3e4ab4df9df 0edbad9e6041d43f97c7369439a40138 97aaf130cfa251e5207ea74b2558293d 62217af0299d6e241778adb849fd2823 0dd7da89b7d1fe97e669f8b4156067c8 61075faba222f97d3367866793f0907b File / Process name…
TAIWAN HEIST: LAZARUS TOOLS AND RANSOMWARE — BAE Systems · under “APPENDIX A – INDICATORS OF ATTACK” · published 2017-10-16 · pulled 2026-10-01

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: MAR-10301706-2.v1 - North Korean Remote Access Tool: VIVACIOUSGIFT | CISA

CISA lists 18 other indicators in this source. 7 are shown, chosen across types.

All 19 indicators from this source

Cited by the same report: TAIWAN HEIST: LAZARUS TOOLS AND RANSOMWARE

BAE Systems lists 9 other indicators in this source. 5 are shown, chosen across types.

All 10 indicators from this source