`58a4d93d386736cb9843a267c7c3c10b`

58a4d93d386736cb9843a267c7c3c10b is a file hash that one published source reports in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kaspersky. The report is dated 2017-08-25.

file hash APT37 MATCHED IN SOURCE

Listed as 58a4d93d3867...

First seen 2017-08-25 · last seen 2017-08-25

Source

…to operate it, we consider other possible interpretations less likely. The artifact encountered is the following: Name svchost.exe MD5 58a4d93d386736cb9843a267c7c3c10b Size 37,888 Interestingly, the backdoor is written in assembly language and was injected into an empty Visual C executable that served as…
WALKING IN YOUR ENEMY’S SHADOW: WHEN FOURTH-PARTY COLLECTION BECOMES ATTRIBUTION HELL — Kaspersky · published 2017-08-25 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: WALKING IN YOUR ENEMY’S SHADOW: WHEN FOURTH-PARTY COLLECTION BECOMES ATTRIBUTION HELL

Kaspersky lists 4 other indicators in this source.