← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Hacking Employers and Seeking Employment: Two Job-Related Campaigns Bear Hallmarks of North Korean Threat Actors
WHITE AlienVault 2023-11-22 Modified: 2023-12-22
55
IOCs
HIGH VOLUME
Unit 42 researchers recently discovered two separate campaigns targeting job-seeking activities linked to North Korea, and two new families of malware that can infect software developers, with potential for both financial gain and espionage.
contagious interviewwagemoleaptbeavertailinvisibleferretgithub abuse
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
InvisibleFerret BeaverTail
Indicators of Compromise (55)
All FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 03185038cad7126663550d2290a14a166494fdd7ab0978b98667d64bda6e27cc — 2023-11-22
FileHash-SHA256 09a508e99b905330a3ebb7682c0dd5712e8eaa01a154b45a861ca12b6af29f86 — 2023-11-22
FileHash-SHA256 0ce264819c7af1c485878ce795fd4727952157af7ffdea5f78bfd5b9d7806db1 — 2023-11-22
FileHash-SHA256 104926c2c937b4597ea3493bccb7683ae812ef3c62c93a8fb008cfd64e05df59 — 2023-11-22
FileHash-SHA256 1123fea9d3a52989ec34041f791045c216d19db69d71e62aa6b24a22d3278ef9 — 2023-11-22
FileHash-SHA256 121ca625f582add0527f888bb84b31920183e78c7476228091ff2199ec5d796b — 2023-11-22
FileHash-SHA256 12c0f44a931b9d0d74a2892565363bedfa13bec8e48ff5cd2352dec968f407ee — 2023-11-22
FileHash-SHA256 1b21556fc8ecb9f8169ba0482de857b1f8a5cb120b2f1ac7729febe76f1eea83 — 2023-11-22
FileHash-SHA256 1c905fa3a108f4c9bc0578882ce7af9682760b80af5232f130aa4f6463156b25 — 2023-11-22
FileHash-SHA256 1f9169492d18bffacebe951a22495d5dec81f35b0929da7783b5f094efef7b48 — 2023-11-22
FileHash-SHA256 2618a067e976f35f65aee95fecc9a8f52abea2fffd01e001f9865850435694cf — 2023-11-22
FileHash-SHA256 276863ee7b250419411b39c8539c31857752e54b53b072dffd0d3669f2914216 — 2023-11-22
FileHash-SHA256 2d300410a3edb77b5f1f0ff2aa2d378425d984f15028c35dfad20fc750a6671a — 2023-11-22
FileHash-SHA256 2d8a5b637a95de3b709780898b7c3957f93d72806e87302f50c40fe850471a44 — 2023-11-22
FileHash-SHA256 305de20b24e2662d47f06f16a5998ef933a5f8e92f9ecadf82129b484769bbac — 2023-11-22
FileHash-SHA256 35434e903bc3be183fa07b9e99d49c0b0b3d8cf6cbd383518e9a9d753d25b672 — 2023-11-22
FileHash-SHA256 39e7f94684129efce4d070d89e27508709f95fa55d9721f7b5d52f8b66b95ceb — 2023-11-22
FileHash-SHA256 40645f9052e03fed3a33a7e0f58bc2c263eeae02cbc855b9308511f5dc134797 — 2023-11-22
FileHash-SHA256 41a912d72ba9d5db95094be333f79b60cae943a2bd113e20cc171f86ebcb86cf — 2023-11-22
FileHash-SHA256 444f56157dfcf9fc2347911a00fe9f3e3cb7971dccf67e1359d2f99a35aed88e — 2023-11-22
FileHash-SHA256 4c465e6c8f43f7d13a1b887ff26d9a30f77cf65dd3b6f2e9f7fe36c8b6e83003 — 2023-11-22
FileHash-SHA256 4c605c6ef280b4ed5657fe97ba5b6106b10c4de02a40ae8c8907683129156efd — 2023-11-22
FileHash-SHA256 4f50051ae3cb57f10506c6d69d7c9739c90ef21bfb82b14da6f4b407b6febac0 — 2023-11-22
FileHash-SHA256 592769457001374fac7a44379282ddf28c2219020c88150e32853f7517896c34 — 2023-11-22
FileHash-SHA256 617c62da1c228ec6d264f89e375e9a594a72a714a9701ed3268aa4742925112b — 2023-11-22
FileHash-SHA256 61dff5cbad45b4fe0852ac95b96b62918742b9c90dd47c672cbe0d1dafccb6c5 — 2023-11-22
FileHash-SHA256 6465f7ddc9cf8ab6714cbbd49e1fd472e19818a0babbaf3764e96552e179c9af — 2023-11-22
FileHash-SHA256 6b3fce8f2dad7e803418edd8dfc807b0252705c11ec77114498b01766102e849 — 2023-11-22
FileHash-SHA256 700a582408cbda7ee79723b3969b8d10d67871ea31bb17c8ca3c0d94b481aa8c — 2023-11-22
FileHash-SHA256 709820850127201a17caab273e01bb36ce185b4c4f68cd1099110bb193c84c42 — 2023-11-22
FileHash-SHA256 72ebfe69c69d2dd173bb92013ab44d895a3367f91f09e3f8d18acab44e37b26d — 2023-11-22
FileHash-SHA256 75f9f99295f86de85a8a2e4d73ed569bdb14a56a33d8240c72084f11752b207e — 2023-11-22
FileHash-SHA256 785f65f1853a08b0e86db5638fbd76e8cad5fe1359655716166a76035261c0be — 2023-11-22
FileHash-SHA256 7b718a46ae4de09ed4f2513df6e989afe1fbb1a0f59511a4689fac5e1745547d — 2023-11-22
FileHash-SHA256 7f8bb754f84a06b3e3617dd1138f07a918d11717cc63acaef8eb5c6d10101377 — 2023-11-22
FileHash-SHA256 845d7978682fa19161281a35b62f4c447c477082a765d6fedb219877d0c90f31 — 2023-11-22
FileHash-SHA256 92aeea4c32013b935cd8550a082aff1014d0cd2c2b7d861b43a344de83b68129 — 2023-11-22
FileHash-SHA256 9867f99a66e64f6bce0cfca18b124194a683b8e4cb0ced44f7cb09386e1b528d — 2023-11-22
FileHash-SHA256 9ae24a1912e4b0bab76ae97484b62ea22bdc27b7ea3e6472f18bf04ca66c87de — 2023-11-22
FileHash-SHA256 a2f8de3c5f5f6ecbf29c15afd43a7c13a5bf60023ecb371d39bcca6ceef1d2b7 — 2023-11-22
FileHash-SHA256 ab198c5a79cd9dedb271bd8a56ab568fbd91984f269f075d8b65173e749a8fde — 2023-11-22
FileHash-SHA256 b5f151f0a4288e148fd10e19c78399f5b7bdff2ad66940fadd20d6eae4b7518b — 2023-11-22
FileHash-SHA256 b833f40b2f3439f317cf95980b29bddd2245d2acc2d5c11e9690dd2fa4289585 — 2023-11-22
FileHash-SHA256 c547b80e1026d562ac851be007792ae98ddc1f3f8776741a72035aca3f18d277 — 2023-11-22
FileHash-SHA256 c5a73896dc628c23a0b6210f50019445e2b8bfc9770f4c81e1fed097f02dfade — 2023-11-22
FileHash-SHA256 c8c11f9b308ea5983eebd8a414684021cc4cc1f67e7398ff967a18ae202fb457 — 2023-11-22
FileHash-SHA256 ceb59dbaf58a8de02f9d5e9b497321db0a19b7db4affd5b8d1a7e40d62775f96 — 2023-11-22
FileHash-SHA256 d8f065d264b1112d6ee3cf34979289e89d9dcb30d2a3bd78cc797a81d3d56f56 — 2023-11-22
FileHash-SHA256 da6d9c837c7c2531f0dbb7ce92bfceba4a9979953b6d49ed0862551d4b465adc — 2023-11-22
FileHash-SHA256 db6e75987cabdbfc21d0fdcb1cdae9887c492cab2b2ff1e529601a34a2abfd99 — 2023-11-22
FileHash-SHA256 de42155e14a3c9c4d919316d6ba830229533de5063fcd110f53e2395ef3aa77a — 2023-11-22
FileHash-SHA256 e2a940c7d19409e960427749519dc02293abe58a1bef78404a8390f818e40d08 — 2023-11-22
FileHash-SHA256 fc9bb03998a89524ce5a0f859feb45806983aa4feb5f4d436107198ca869ff6f — 2023-11-22
FileHash-SHA256 ff620bd560485c13a58a0de941bd3e52943036e6a05306e928f7c626998822fb — 2023-11-22
domain blocktestingto.com — 2023-11-22
References (1)
↗ https://unit42.paloaltonetworks.com/two-campaigns-by-north-korea-bad-actors-target-job-hunters/