`46b318bbb72ee68c9d9183d78e79fb5a`

46b318bbb72ee68c9d9183d78e79fb5a is a file hash that 2 published sources report in connection with Lazarus Group and unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from CISA and Kevin Perlow. The earliest of those reports is dated 2018-12-21 and the most recent 2020-07-26.

file hash Lazarus GroupDPRK (cluster unattributed) MATCHED IN SOURCE

Listed as 46b318bbb72e...

First seen 2018-12-21 · last seen 2020-07-26

Sources

…Name Lost_File.so Size 108896 bytes Type 64-bit XCOFF executable or object module MD5 46b318bbb72ee68c9d9183d78e79fb5a SHA1 5375ad3746ce42a6f262f55c4f1f0d273fb69c54 SHA256 10ac312c8dd02e417dd24d53c99525c29d74dcbc84730351ad7a4e0a4b1a0eba SHA512…
MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware | CISA — CISA · under “Details” · published 2018-12-21 · pulled 2026-09-12
…This repor t examines workflows for: MD5 Hash Classification Description 46b318bbb72ee68c9d9183d78e79fb5a AIX Type 1 A likely earlier version of the malware that contains IP whitelisting but no card blacklisting.…
FASTCash and INJX_Pure: How Threat Actors Use Public Standards for Financial Fraud — Kevin Perlow · published 2020-07-26 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware | CISA

CISA lists 40 other indicators in this source. 12 are shown, chosen across types.

All 41 indicators from this source