`0608e411348905145a267a9beaf5cd3527f11f95c4afde4c45998f066f418571`

0608e411348905145a267a9beaf5cd3527f11f95c4afde4c45998f066f418571 is a file hash that 3 published sources report in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Lexfo, CISA and SentinelOne. The earliest of those reports is dated 2020-02-19 and the most recent 2020-10-08.

file hash Lazarus Group MATCHED IN SOURCE

Listed as 0608e4113489...

First seen 2020-02-19 · last seen 2020-10-08

Sources

…1fe1fa6b01166c373de68c029d8cdda60cb1599053f935e580f3f40aaf106345 fe43bc385b30796f5e2d94dfa720903c70e66bc91dfdcfb2f3986a1fea3fe8c5 0608e411348905145a267a9beaf5cd3527f11f95c4afde4c45998f066f418571 fe43bc385b30796f5e2d94dfa720903c70e66bc91dfdcfb2f3986a1fea3fe8c5 084b21bc32ee19af98f85aee8204a148032ce7eabef668481b919195dd62b319…
The Lazarus Constellation - A study on North-Korean malware — Lexfo · published 2020-10-08 · pulled 2026-09-12
…(GUI) Intel 80386, for MS Windows MD5 34e56056e5741f33d823859e77235ed9 SHA1 fcc2dcbac7d3cbcf749f6aab2f37cc4b62d0bb64 SHA256 0608e411348905145a267a9beaf5cd3527f11f95c4afde4c45998f066f418571 SHA512…
MAR-10135536-8.v3 – North Korean Trojan: HOPLIGHT — CISA · under “Details” · published 2020-02-19 · pulled 2026-10-01
…both static and behavioral angles. IOCs HOPLIGHT SHA-256: 05feed9762bc46b47a7dc5c469add9f163c16df4ddaafe81983a628da5714461 SHA-256: 0608e411348905145a267a9beaf5cd3527f11f95c4afde4c45998f066f418571 SHA-256: 084b21bc32ee19af98f85aee8204a148032ce7eabef668481b919195dd62b319 SHA-256:…
DPRK Hidden Cobra Update: North Korean Malicious Cyber Activity - SentinelLabs — SentinelOne · under “IOCs” · published 2020-02-26 · pulled 2026-10-01

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: The Lazarus Constellation - A study on North-Korean malware

Lexfo lists 23 other indicators in this source. 5 are shown, chosen across types.

All 24 indicators from this source

Cited by the same report: MAR-10135536-8.v3 – North Korean Trojan: HOPLIGHT

CISA lists 117 other indicators in this source. 4 are shown, chosen across types.

All 118 indicators from this source

Cited by the same report: DPRK Hidden Cobra Update: North Korean Malicious Cyber Activity - SentinelLabs

SentinelOne lists 57 other indicators in this source. 3 are shown, chosen across types.

All 58 indicators from this source