5bfeef520eb1e62ea2ef313bb979aeae

5bfeef520eb1e62ea2ef313bb979aeae is a file hash that 2 published sources report in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from AhnLab ASEC. The earliest of those reports is dated 2024-05-28 and the most recent 2024-05-29.

file hash Kimsuky MATCHED IN SOURCE

Listed as 5bfeef520eb1...

First seen 2024-05-28 · last seen 2024-05-29

Sources

  • …(2024.02.26.03) Keylogger/PowerShell.Agent.SC197159 (2024.02.26.03) MD5 279c86f3796d14d2a4d89049c2b3fa2d 5bfeef520eb1e62ea2ef313bb979aeae d404ab9c8722fc97cceb95f258a2e70d AhnLab TIP 를 구독하시면 연관 IOC 및 상세 분석 정보를 추가적으로 확인하실 수 있습니다.…
    MS-Office 수식 편집기 취약점을 이용해 설치되는 키로거 (Kimsuky) - ASEC — AhnLab ASEC · under “MS-Office 수식 편집기 취약점을 이용해 설치되는 키로거 (Kimsuky)” · published 2024-05-29 · pulled 2026-09-12
  • …(2024.02.26.03) Keylogger/PowerShell.Agent.SC197159 (2024.02.26.03) MD5 279c86f3796d14d2a4d89049c2b3fa2d 5bfeef520eb1e62ea2ef313bb979aeae d404ab9c8722fc97cceb95f258a2e70d Gain access to related IOCs and detailed analysis by subscribing to AhnLab TIP . For…
    Keylogger Installed Using MS Office Equation Editor Vulnerability (Kimsuky) - ASEC — AhnLab ASEC · under “Keylogger Installed Using MS Office Equation Editor Vulnerability (Kimsuky)” · published 2024-05-28 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: MS-Office 수식 편집기 취약점을 이용해 설치되는 키로거 (Kimsuky) - ASEC

AhnLab ASEC lists 2 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.