9f85a07d4b4abff82ca18d990f062a84

9f85a07d4b4abff82ca18d990f062a84 is a file hash that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kaspersky Securelist. The report is dated 2023-04-03.

file hash Lazarus Group MATCHED IN SOURCE

Listed as 9f85a07d4b4a...

First seen 2023-04-03 · last seen 2023-04-03

Source

  • …implants to find out more details about the toolset used in the supply chain attack. Gopuram indicators of compromise MD5 hashes 9f85a07d4b4abff82ca18d990f062a84 96d3bbf4d2cf6bc452b53c67b3f2516a File paths C:\Windows\System32\config\TxR\<machine hardware profile…
    Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack | Securelist — Kaspersky Securelist · under “Gopuram indicators of compromise” · published 2023-04-03 · pulled 2026-09-11

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack | Securelist

Kaspersky Securelist lists 4 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.