`5a8ecafbd5809000334bf5b940a497d0ed750dd11da8a03796f5ce53257cc892`

5a8ecafbd5809000334bf5b940a497d0ed750dd11da8a03796f5ce53257cc892 is a file hash that one published source reports in connection with Konni activity, which public reporting attributes to North Korea (DPRK). It is cited here from S2W. The earliest of those reports is dated 2026-10-01 and the most recent 2026-10-18.

file hash Konni MATCHED IN SOURCE

Listed as 5a8ecafbd580...

First seen 2026-10-01 · last seen 2026-10-18

Source

…name: 가상자산사업자 검사계획민당정회의 발표자료_FN2.hwp.lnk (Korean file name) - MD5: e37c8f6aba686aab3d7ecedbd1d0ef43 - SHA256: 5a8ecafbd5809000334bf5b940a497d0ed750dd11da8a03796f5ce53257cc892 Upon execution, this malicious LNK file leverages PowerShell commands to drop and execute a decoy document along with additional files…
Analysis of the KONNI's LINKON Malware — S2W · published 2025-02-14 · pulled 2026-10-01

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: Analysis of the KONNI's LINKON Malware

S2W lists 1 other indicator in this source.