ffe4cfde23a1ef557f7dc56f53b3713d8faa9e47ae6562b61ffa1887e5d2d56e

ffe4cfde23a1ef557f7dc56f53b3713d8faa9e47ae6562b61ffa1887e5d2d56e is a file hash that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Hunt.io. The report is dated 2025-01-28.

file hash Lazarus Group MATCHED IN SOURCE

Listed as ffe4cfde23a1...

First seen 2025-01-28 · last seen 2025-01-28

Source

  • …Card Game." As shown in the figure below, the site features a download button for an Android APK file (one68_1_1.0.apk, SHA-256: ffe4cfde23a1ef557f7dc56f53b3713d8faa9e47ae6562b61ffa1887e5d2d56e). Figure 6: Online gaming webpage hosted on port 80 of 51.79.218.159.…
    Unmasking SparkRAT: Detection & macOS Campaign Insights — Hunt.io · under “File Analysis: client.bin” · published 2025-01-28 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: Unmasking SparkRAT: Detection & macOS Campaign Insights

Hunt.io lists 6 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.