`0eb8db3cbde470407f942fd63afe42b8`

0eb8db3cbde470407f942fd63afe42b8 is a file hash that 3 published sources report in connection with APT37 and Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from AhnLab ASEC and 安恒信息. The earliest of those reports is dated 2023-08-30 and the most recent 2023-09-01.

file hash APT37 Kimsuky MATCHED IN SOURCE

Listed as 0eb8db3cbde4...

First seen 2023-08-30 · last seen 2023-09-01

Sources

…(2023.08.17.03) [행위 진단] DefenseEvasion/DETECT.T1059.M11294 DefenseEvasion/DETECT.T1059.M11295 MD5 0eb8db3cbde470407f942fd63afe42b8 27f74072d6268b5d96d73107c560d852 2d444b6f72c8327d1d155faa2cca7fd7 URL http://75.119.136.207/config/bases/config.php…
Backdoor를 유포하는 악성 LNK : RedEyes(ScarCruft) - ASEC — AhnLab ASEC · under “Backdoor를 유포하는 악성 LNK : RedEyes(ScarCruft)” · published 2023-09-01 · pulled 2026-09-11
…(2023.08.17.03) [Behavior Detection] DefenseEvasion/DETECT.T1059.M11294 DefenseEvasion/DETECT.T1059.M11295 MD5 0eb8db3cbde470407f942fd63afe42b8 27f74072d6268b5d96d73107c560d852 2d444b6f72c8327d1d155faa2cca7fd7 URL http://75.119.136.207/config/bases/config.php…
Distribution of Backdoor via Malicious LNK: RedEyes (ScarCruft) - ASEC — AhnLab ASEC · under “Distribution of Backdoor via Malicious LNK: RedEyes (ScarCruft)” · published 2023-08-31 · pulled 2026-09-11
…文件名 MD5 REPORT.zip 16a34b0e194b3f825a19db5363df4cca 현황조사표.xlsx.lnk 0eb8db3cbde470407f942fd63afe42b8 현황조사표.xlsx 66165dfb784cbcb442e4767f0ca4f469 PMmVvG56FLC9y.bat 2d444b6f72c8327d1d155faa2cca7fd7…
ScarCruft针对韩国金融、高校下发Chinotto后门的攻击活动分析 - 安恒威胁情报中心 — 安恒信息 · under “攻击样本分析” · published 2023-08-30 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: Backdoor를 유포하는 악성 LNK : RedEyes(ScarCruft) - ASEC

AhnLab ASEC lists 3 other indicators in this source.

Cited by the same report: Distribution of Backdoor via Malicious LNK: RedEyes (ScarCruft) - ASEC

AhnLab ASEC lists 4 other indicators in this source. 1 are shown, chosen across types.

All 5 indicators from this source

Cited by the same report: ScarCruft针对韩国金融、高校下发Chinotto后门的攻击活动分析 - 安恒威胁情报中心

安恒信息 lists 2 other indicators in this source.