`811b42bb169f02d1b0b3527e2ca6c00630bebd676b235cd4e391e9e595f9dfa8`

811b42bb169f02d1b0b3527e2ca6c00630bebd676b235cd4e391e9e595f9dfa8 is a file hash that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Cisco Talos. The report is dated 2021-11-10.

file hash Kimsuky MATCHED IN SOURCE

Listed as 811b42bb169f...

First seen 2021-11-10 · last seen 2021-11-10

Source

…The malicious blogs hosted on Blogspot have been taken down already at the time of publication of this research. IOCs Hashes Maldocs 811b42bb169f02d1b0b3527e2ca6c00630bebd676b235cd4e391e9e595f9dfa8 VBA 4b244ac09e4b46792661754bd5d386e8b1a168cb1d5ed440df04c1c2928cb84d Stage 2…
North Korean attackers use malicious blogs to deliver malware to high-profile South Korean targets — Cisco Talos · under “Maldocs” · published 2021-11-10 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: North Korean attackers use malicious blogs to deliver malware to high-profile South Korean targets

Cisco Talos lists 1 other indicator in this source.