`2151d4d7dc8d6dca7242928a17ea3fb14f58ccef`

2151d4d7dc8d6dca7242928a17ea3fb14f58ccef is a file hash that one published source reports in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Sophos. The report is dated 2026-03-23.

file hash Contagious Interview MATCHED IN SOURCE

Listed as 2151d4d7dc8d...

First seen 2026-03-23 · last seen 2026-03-23

Source

…URL NICKEL ALLEY malware staging server 52f173a760db5d68e52ba1f1ac51c023 MD5 hash VBScript file used by NICKEL ALLEY (start.vbs) 2151d4d7dc8d6dca7242928a17ea3fb14f58ccef SHA1 hash VBScript file used by NICKEL ALLEY (start.vbs) 5e307ef3aa9f20d963382700173530cdc455c1523631bbe22ede3710a2a30373 SHA256 hash…
NICKEL ALLEY strategy: Fake it ‘til you make it — Sophos · under “Detections and threat indicators” · published 2026-03-23 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: NICKEL ALLEY strategy: Fake it ‘til you make it

Sophos lists 13 other indicators in this source. 12 are shown, chosen across types.

All 14 indicators from this source