`baa93d47220682c04d92f7797d9224ce`

baa93d47220682c04d92f7797d9224ce is a file hash that 5 published sources report in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from CISA. The earliest of those reports is dated 2018-12-21 and the most recent 2020-08-26.

file hash Lazarus Group MATCHED IN SOURCE

Listed as baa93d472206...

First seen 2018-12-21 · last seen 2020-08-26

Sources

…matches found. ssdeep Matches No matches found. PE Metadata Compile Date 2017-08-14 13:14:04-04:00 Import Hash baa93d47220682c04d92f7797d9224ce PE Sections MD5 Name Raw Size Entropy 23041caef38d4991296ffbe42743c691 header 4096 0.825738…
MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware | CISA — CISA · under “PE Metadata” · published 2018-12-21 · pulled 2026-09-12
…matches found. ssdeep Matches No matches found. PE Metadata Compile Date 2018-09-16 20:16:44-04:00 Import Hash baa93d47220682c04d92f7797d9224ce PE Sections MD5 Name Raw Size Entropy e7fd8dca1ed04d4a10fb802bf3c8d5ef header 4096 0.987963…
MAR-10288834-1.v1 – North Korean Remote Access Tool: COPPERHEDGE | CISA — CISA · under “PE Metadata” · published 2020-05-12 · pulled 2026-09-12
…matches found. ssdeep Matches No matches found. PE Metadata Compile Date 2017-02-20 06:09:30-05:00 Import Hash baa93d47220682c04d92f7797d9224ce PE Sections MD5 Name Raw Size Entropy a32e7b28831808e208355ae637e006f0 header 4096 0.814733…
MAR-10301706-2.v1 - North Korean Remote Access Tool: VIVACIOUSGIFT | CISA — CISA · under “PE Metadata” · published 2020-08-26 · pulled 2026-09-12
…matches found. ssdeep Matches No matches found. PE Metadata Compile Date 2018-02-26 20:08:54-05:00 Import Hash baa93d47220682c04d92f7797d9224ce PE Sections MD5 Name Raw Size Entropy 0de0ceb73fba415dc20a730f628429a6 header 4096 0.816628…
MAR-10265965-2.v1 – North Korean Trojan: SLICKSHOES — CISA · under “PE Metadata” · published 2020-02-14 · pulled 2026-10-01
…matches found. ssdeep Matches No matches found. PE Metadata Compile Date 2017-02-20 05:45:37-05:00 Import Hash baa93d47220682c04d92f7797d9224ce PE Sections MD5 Name Raw Size Entropy a7295799f336e3a6e8b61fe4f93e2251 header 4096 0.812374…
MAR-10265965-3.v1 – North Korean Trojan: CROWDEDFLOUNDER — CISA · under “PE Metadata” · published 2020-02-14 · pulled 2026-10-01

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware | CISA

CISA lists 40 other indicators in this source. 5 are shown, chosen across types.

All 41 indicators from this source

Cited by the same report: MAR-10288834-1.v1 – North Korean Remote Access Tool: COPPERHEDGE | CISA

CISA lists 79 other indicators in this source. 4 are shown, chosen across types.

All 80 indicators from this source

Cited by the same report: MAR-10301706-2.v1 - North Korean Remote Access Tool: VIVACIOUSGIFT | CISA

CISA lists 18 other indicators in this source. 3 are shown, chosen across types.

All 19 indicators from this source