← All actor clusters

05ad5f346d0282e43360965373eb2a8d39735137

05ad5f346d0282e43360965373eb2a8d39735137 is a file hash that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from CISA. The report is dated 2020-02-19.

file hash Lazarus Group MATCHED IN SOURCE

Listed as 05ad5f346d02...

First seen 2020-02-19 · last seen 2020-02-19

Source

• …Size 245760 bytes Type PE32+ executable (DLL) (console) x86-64, for MS Windows MD5 3021b9ef74c7bddf59656a035f94fd08 SHA1 05ad5f346d0282e43360965373eb2a8d39735137 SHA256 83228075a604e955d59edc760e4c4ed16eedabfc8f6ac291cf21b4fcbcd1f70a SHA512…

  MAR-10135536-8.v3 – North Korean Trojan: HOPLIGHT — CISA · under “Details” · published 2020-02-19 · pulled 2026-10-01

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: MAR-10135536-8.v3 – North Korean Trojan: HOPLIGHT

CISA lists 117 other indicators in this source. 12 are shown, chosen across types.

• 05feed9762bc46b47a7dc5c469add9f163c16df4ddaafe81983a628da5714461 file hash
• 0608e411348905145a267a9beaf5cd3527f11f95c4afde4c45998f066f418571 file hash
• 06be4fe1f26bc3e4bef057ec83ae81bd3199c7fc file hash
• 07d2b057d2385a4cdf413e8d342305df file hash
• 084b21bc32ee19af98f85aee8204a148032ce7eabef668481b919195dd62b319 file hash
• 0893e206274cb98189d51a284c2a8c83 file hash
• 112.191.255.255 IP address
• 113.114.117.122 IP address
• 113.119.255.255 IP address
• 117.239.241.2 IP address
• 119.18.230.253 IP address
• 128.200.115.228 IP address

All 118 indicators from this source