`627ee714b1e4f5bd692061e1c29783191f71c10c91f14c632e405fbe57d4dd3b`

627ee714b1e4f5bd692061e1c29783191f71c10c91f14c632e405fbe57d4dd3b is a file hash that one published source reports in connection with Konni activity, which public reporting attributes to North Korea (DPRK). It is cited here from navneet. The report is dated 2025-04-21.

file hash Konni MATCHED IN SOURCE

Listed as 627ee714b1e4...

First seen 2025-04-21 · last seen 2025-04-21

Source

…but there are several indicators worth calling out. Stage 0: The ZIP File Filename : No clue (just got the SHA256) SHA256 : 627ee714b1e4f5bd692061e1c29783191f71c10c91f14c632e405fbe57d4dd3b File Type : ZIP archive File Size : 3.25 MB Contents : 제안서.pdf.lnk (LNK File) First Seen on VT : April 11, 2025 This…
A Deep Dive Into a Multi-Stage Malware Campaign Potentially Linked to DPRK’s Konni Group — navneet · under “Stage 0: The ZIP File” · published 2025-04-21 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: A Deep Dive Into a Multi-Stage Malware Campaign Potentially Linked to DPRK’s Konni Group

navneet lists 2 other indicators in this source.