`5a7ef48fe0e8ae65733db64ddb7f2478`

5a7ef48fe0e8ae65733db64ddb7f2478 is a file hash that 2 published sources report in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kaspersky Securelist and 0xthreatintel. The earliest of those reports is dated 2021-11-29 and the most recent 2021-12-03.

file hash APT37 MATCHED IN SOURCE

Listed as 5a7ef48fe0e8...

First seen 2021-11-29 · last seen 2021-12-03

Sources

…Basic Script) c155f49f0a9042d6df68fb593968e110 계정기능 제한 안내.hwp (Notice of limitation of account.hwp) 5a7ef48fe0e8ae65733db64ddb7f2478 (Windows executable) The Visual Basic Script created by the first HWP file (MD5 f17502d3e12615b0fa8868472a4eabfb ) has similar…
ScarCruft surveilling North Korean defectors and human rights activists | Securelist — Kaspersky Securelist · under “Older malicious HWP documents” · published 2021-11-29 · pulled 2026-09-12
…server: (from decoded powershell script) 222.122.86.177 PE file : hanwordupdate (2).exe hashes: MD5 5a7ef48fe0e8ae65733db64ddb7f2478 SHA-1 b0ca169c6a64336e48fe8d5c0e8376212b72784c SHA-256 304d569374625857323cae7ce6a1a4bb56b32a3a0d5fdb7d4a9e7392c3f56fb3 DNS…
APT37 targets Journalists & Security Researchers — 0xthreatintel · under “IOCs:” · published 2021-12-03 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: ScarCruft surveilling North Korean defectors and human rights activists | Securelist

Kaspersky Securelist lists 6 other indicators in this source.

Cited by the same report: APT37 targets Journalists & Security Researchers

0xthreatintel lists 17 other indicators in this source. 6 are shown, chosen across types.

All 18 indicators from this source