12539ac37a81cc2e19338a67d237f833
12539ac37a81cc2e19338a67d237f833 is a file hash
that one published source reports
in connection with Kimsuky activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Qianxin.
The report is dated 2022-09-14.
file hash Kimsuky MATCHED IN SOURCE
Listed as 12539ac37a81...
Source
-
…文件名 SW보안점검표(개발자사전점검용)_v2.0_beta.xlsm .vbs (译为“SW 安全检查表(用于开发人员预检查)”) MD5 12539ac37a81cc2e19338a67d237f833 文件类型 VBScript文件 文件大小 6254878字节 该样本在运行后会释放带加密保护的诱饵文档,同时在受害者毫无察觉的情况下加载一个轻量级后门,执行流程如下所示。 VBS & 加载器DLL…
来自Kimsuky组织的突刺:多种攻击武器针对韩国的定向猎杀 — Qianxin
Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.