Chollima Hunter

← All actor clusters

4cd5df82e1d4f93361e71624730fbd1dd2f8ccaec7fc7cbdfa87497fb5cb438c

4cd5df82e1d4f93361e71624730fbd1dd2f8ccaec7fc7cbdfa87497fb5cb438c is a file hash that one published source reports in connection with APT38 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Huntress. The report is dated 2025-06-18.

file hash APT38 MATCHED IN SOURCE

Listed as 4cd5df82e1d4...

First seen 2025-06-18 · last seen 2025-06-18

Source

  • …leveraged Mac-specific binaries, APIs, and functionality. IOCs Files Name SHA256 Notes a 4cd5df82e1d4f93361e71624730fbd1dd2f8ccaec7fc7cbdfa87497fb5cb438c C++ Dropper remoted ad01beb19f5b8c7155ee5415781761d4c7d85a31bb90b618c3f5d9f737f2d320 Go Backdoor airmond…
    Inside the BlueNoroff Web3 macOS Intrusion Analysis — Huntress · under “Files” · published 2025-06-18 · pulled 2026-10-01

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.