294acafed42c6a4f546486636b4859c074e53d74be049df99932804be048f42c

294acafed42c6a4f546486636b4859c074e53d74be049df99932804be048f42c is a file hash that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from AT&T Alien Labs. The report is dated 2024-05-09.

file hash Lazarus Group MATCHED IN SOURCE

Listed as 294acafed42c...

First seen 2024-05-09 · last seen 2024-05-09

Source

  • …Jun2021." reference = "https://otx.alienvault.com/pulse/294acafed42c6a4f546486636b4859c074e53d74be049df99932804be048f42c" SHA256 = "294acafed42c6a4f546486636b4859c074e53d74be049df99932804be048f42c" strings: $a1 = "ZSBydW4gaW4gRE9TIG1vZGUuDQ0KJA" ascii //run in DOS mode.…
    Lazarus campaign TTPs and evolution — AT&T Alien Labs · under “Detection Methods” · published 2024-05-09 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: Lazarus campaign TTPs and evolution

AT&T Alien Labs lists 12 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.