Chollima Hunter

← All actor clusters

655221b6bcad7b5b0b9766142cbc257a

655221b6bcad7b5b0b9766142cbc257a is a file hash that 2 published sources report in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Break Glass Intelligence. The earliest of those reports is dated 2026-03-12 and the most recent 2026-03-17.

file hash Lazarus Group MATCHED IN SOURCE

Listed as 655221b6bcad...

First seen 2026-03-12 · last seen 2026-03-17

Sources

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: When Nation-States Become Ransomware Affiliates: Lazarus Group Deploys Medusa via a Custom IME-Based Loader

Break Glass Intelligence lists 10 other indicators in this source. 7 are shown, chosen across types.

All 11 indicators from this source

Cited by the same report: Lazarus Group Caught Running Medusa Ransomware: XOR-Decoded Config Exposes Tor C2, IME-Based Loader, and a 7-Month Intrusion Timeline

Break Glass Intelligence lists 8 other indicators in this source. 3 are shown, chosen across types.

All 9 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.