12539ac37a81cc2e19338a67d237f833

12539ac37a81cc2e19338a67d237f833 is a file hash that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Qianxin. The report is dated 2022-09-14.

file hash Kimsuky MATCHED IN SOURCE

Listed as 12539ac37a81...

First seen 2022-09-14 · last seen 2022-09-14

Source

  • …文件名 SW보안점검표(개발자사전점검용)_v2.0_beta.xlsm .vbs (译为“SW 安全检查表(用于开发人员预检查)”) MD5 12539ac37a81cc2e19338a67d237f833 文件类型 VBScript文件 文件大小 6254878字节 该样本在运行后会释放带加密保护的诱饵文档,同时在受害者毫无察觉的情况下加载一个轻量级后门,执行流程如下所示。 VBS & 加载器DLL…
    来自Kimsuky组织的突刺:多种攻击武器针对韩国的定向猎杀 — Qianxin · under “来自Kimsuky组织的突刺:多种攻击武器针对韩国的定向猎杀” · published 2022-09-14 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: 来自Kimsuky组织的突刺:多种攻击武器针对韩国的定向猎杀

Qianxin lists 12 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.