8b4c532f10603a8e199aa4281384764e

8b4c532f10603a8e199aa4281384764e is a file hash that 2 published sources report in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kaspersky Securelist and Qihoo360. The earliest of those reports is dated 2019-03-29 and the most recent 2020-01-08.

file hash Lazarus Group MATCHED IN SOURCE

Listed as 8b4c532f1060...

First seen 2019-03-29 · last seen 2020-01-08

Sources

  • …c2ffbf7f2f98c73b98198b4937119a18 PKG file hash dab34d94ca08ba5b25edadfe67ae4607 cb56955b70c87767dee81e23503086c3 8b4c532f10603a8e199aa4281384764e PKG file name CelasTradePro.pkg WbBot.pkg BitcoinTrader.pkg Packaging time 2018-07-12 14:09:33 2018-11-05 6:11:38…
    Operation AppleJeus Sequel | Securelist — Kaspersky Securelist · under “Life after Operation AppleJeus” · published 2020-01-08 · pulled 2026-09-11
  • …“Celas Trade Pro”版 6.载荷下载存放位置发生改变 “Worldbit-bot”版 “Celas Trade Pro”版 IOCS Md5 3efeccfc6daf0bf99dcb36f247364052 8b4c532f10603a8e199aa4281384764e b63e8d4277b190e2e3f5236f07f89eee domain wb-invest.net wb-bot.org Lazarus组织攻击金融等行业重大事件:…
    APT-C-26 (Lazarus)组织对数字货币交易所的最新攻击预警 — Qihoo360 · under “IOCS” · published 2019-03-29 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: Operation AppleJeus Sequel | Securelist

Kaspersky Securelist lists 15 other indicators in this source. 7 are shown, chosen across types.

All 16 indicators from this source

Cited by the same report: APT-C-26 (Lazarus)组织对数字货币交易所的最新攻击预警

Qihoo360 lists 2 other indicators in this source. 1 are shown, chosen across types.

All 3 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.