`875b0cbad25e04a255b13f86ba361b58453b6f3c5cc11aca2db573c656e64e24`

875b0cbad25e04a255b13f86ba361b58453b6f3c5cc11aca2db573c656e64e24 is a file hash that one published source reports in connection with APT38 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Dion Alexander. The report is dated 2025-04-13.

file hash APT38 MATCHED IN SOURCE

Listed as 875b0cbad25e...

First seen 2025-04-13 · last seen 2025-04-13

Source

…(Whitelisted) www.addfriend.kr → Suspicious, Unknown Reputation Indicators of Compromise (IOCs) Malicious File Hashes: SHA256: 875B0CBAD25E04A255B13F86BA361B58453B6F3C5CC11ACA2DB573C656E64E24 MD5: 15DC6A28B875B4706BCC0DB4A026AEB0 Suspicious Network Indicators: IP Address: 211.239.117.117 → Potential C2 Server Domain:…
Unpacking APT38: Static and Dynamic Analysis of Lazarus Group Malware — Dion Alexander · under “Indicators of Compromise (IOCs)” · published 2025-04-13 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: Unpacking APT38: Static and Dynamic Analysis of Lazarus Group Malware

Dion Alexander lists 2 other indicators in this source.