`5d28072d76bd6af944fcec8045cbc24410a58fe70eef6f83c50934245ec92e60`

5d28072d76bd6af944fcec8045cbc24410a58fe70eef6f83c50934245ec92e60 is a file hash that one published source reports in connection with Konni activity, which public reporting attributes to North Korea (DPRK). It is cited here from Securonix. The report is dated 2022-07-20.

file hash Konni MATCHED IN SOURCE

Listed as 5d28072d76bd...

First seen 2022-07-20 · last seen 2022-07-20

Source

…File Name SHA256 (Dynamic/Custom implants) food.bat 07b10c5a772f6f3136eb58a7034bcb5ce71c0c740aaa528d3bae318d939b2242 seed.bat 5d28072d76bd6af944fcec8045cbc24410a58fe70eef6f83c50934245ec92e60 wpcsvc.dat b9727fb553894d857900c0a18f82723659d136329ef56bbe9388905a666f1197 wpcsvc.dll…
STIFF#BIZON Detection Using Securonix – New Attack Campaign Observed Possibly Linked to Konni/APT37 (North Korea) — Securonix · under “STIFF#BIZON – Indicators of compromise” · published 2022-07-20 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: STIFF#BIZON Detection Using Securonix – New Attack Campaign Observed Possibly Linked to Konni/APT37 (North Korea)

Securonix lists 8 other indicators in this source.