← All actor clusters

`f6628bd40f4cd6cc8405541c269ac901`

f6628bd40f4cd6cc8405541c269ac901 is a file hash that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Qianxin. The report is dated 2022-09-14.

file hash Kimsuky MATCHED IN SOURCE

Listed as f6628bd40f4c...

First seen 2022-09-14 · last seen 2022-09-14

Source

…【3】，其相关信息如下：文件名 Thumbs.db.pif MD5 f6628bd40f4cd6cc8405541c269ac901 文件大小 319488字节启动参数 njXbxuRQyujZeUAGGYaH 样本启动后会校验参数个数，当未携带参数时直接退出程序，在单独执行该样本时，可有效躲避沙箱的动态行为检测。…
来自Kimsuky组织的突刺：多种攻击武器针对韩国的定向猎杀 — Qianxin · under “来自Kimsuky组织的突刺：多种攻击武器针对韩国的定向猎杀” · published 2022-09-14 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: 来自Kimsuky组织的突刺：多种攻击武器针对韩国的定向猎杀

Qianxin lists 12 other indicators in this source.