`894e7d4ffd764bb458809c7f0643694b036ead30`

894e7d4ffd764bb458809c7f0643694b036ead30 is a file hash that 2 published sources report in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Group-IB and Volexity. The earliest of those reports is dated 2023-03-30 and the most recent 2023-03-31.

file hash Lazarus Group MATCHED IN SOURCE

Listed as 894e7d4ffd76...

First seen 2023-03-30 · last seen 2023-03-31

Sources

…aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 11bc82a9bd8297bd0823bce5d6202082 894e7d4ffd764bb458809c7f0643694b036ead30 f79c3b0adb6ec7bcc8bc9ae955a1571aaed6755a28c8b17b1d7595ee86840952 7faea2b01796b80d180399040bb69835…
36gate: supply chain attack | Group-IB Blog — Group-IB · under “Indicators of compromise” · published 2023-03-31 · pulled 2026-09-11
…Name(s) N/A Size 288.0KB (294912 Bytes) File Type application/x-dosexec MD5 11bc82a9bd8297bd0823bce5d6202082 SHA1 894e7d4ffd764bb458809c7f0643694b036ead30 SHA256 f79c3b0adb6ec7bcc8bc9ae955a1571aaed6755a28c8b17b1d7595ee86840952 The purpose of this malware, which Volexity will refer…
3CX Supply Chain Compromise Leads to ICONIC Incident | Volexity — Volexity · under “Stage #1: Supply Chain Attacks – ICONIC” · published 2023-03-30 · pulled 2026-09-11

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: 36gate: supply chain attack | Group-IB Blog

Group-IB lists 46 other indicators in this source. 7 are shown, chosen across types.

All 47 indicators from this source

Cited by the same report: 3CX Supply Chain Compromise Leads to ICONIC Incident | Volexity

Volexity lists 23 other indicators in this source. 5 are shown, chosen across types.

All 24 indicators from this source