c265765a15a59191240b253db33554622393ea59

c265765a15a59191240b253db33554622393ea59 is a file hash that one published source reports in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Objective-See. The report is dated 2025-01-01.

file hash Contagious Interview MATCHED IN SOURCE

Listed as c265765a15a5...

First seen 2025-01-01 · last seen 2025-01-01

Source

  • …several files, including one download.ultraedit.info/bd.log that is saved to /Users/Shared/.fseventsd . The .fseventsd binary (SHA-1: C265765A15A59191240B253DB33554622393EA59 ) was originally undetected by the AV engines on VT: .fseventsd on VirusTotal From extracting its embedded strings, we can see that…
    The Mac Malware of 2024 👾 — Objective-See · under “👾 Zuru(2?)” · published 2025-01-01 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: The Mac Malware of 2024 👾

Objective-See lists 5 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.