a2117f2058043ef757af6e5d45afa491

a2117f2058043ef757af6e5d45afa491 is a file hash that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from 安恒信息. The report is dated 2020-11-24.

file hash Lazarus Group MATCHED IN SOURCE

Listed as a2117f205804...

First seen 2020-11-24 · last seen 2020-11-24

Source

  • …在近期发现的样本中,攻击者将部分docx文件嵌入lnk文件内。不过在攻击的执行过程中,诱饵文档仍然是通过浏览器访问google drive网盘服务链接打开的。同时也有着前文提及的可执行文件样本出现,可以看出攻击者正尝试更新钓鱼的手段。 IOC Hash: a2117f2058043ef757af6e5d45afa491 a164164ef82fa17605c49c36c67a6244 14a00f517012279af53118a491253e5c 224d2398437e665f3202d4118e4748e2…
    Lazarus组织对加密货币行业持续发起攻击 - 安恒威胁情报中心 — 安恒信息 · under “IOC” · published 2020-11-24 · pulled 2026-09-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: Lazarus组织对加密货币行业持续发起攻击 - 安恒威胁情报中心

安恒信息 lists 11 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.