https://www.virustotal.com/en/user/CYBERCOM_Malware_Alert/

2020.05.12 update

134b082b418129ffa390fbee1568bd9510c54bfdd0e6b1f36bc7b8f867e56283

1678327c5f36074cf5f18d1a92c2d9fea9bfae6c245eaad01640fd75af4d6c11

aab2868a6ebc6bdee5bd12104191db9fc1950b30bcf96eab99801624651e77b6

19f9a9f7a0c3e6ca72ea88c655b6500f7da203d46f38076e6e8de0d644a86e35

2057c0cf4617eab7c91b99975dfb1e259609c4fa512e9e08a311a9a2eb65a6cf

zip password : infected

2a791769aa73ac757f210f8546125b57

2ff1688fe866ec2871169197f9d46936

3edce4d49a2f31b8ba9bad0b8ef54963

5c0c1b4c3b1cfd455ac05ace994aed4b

07d2b057d2385a4cdf413e8d342305df

34e56056e5741f33d823859e77235ed9

38fc56965dccd18f39f8a945f6ebc439

170a55f7c0448f1741e60b01dcec9cfb

d2da675a8adfef9d0c146154084fff62

e4ed26d5e2a84cc5e48d285e4ea898c0

f315be41d9765d69ad60f0b4d29e4300

https://www.us-cert.gov/ncas/current-activity/2019/09/09/north-korean-malicious-cyber-activity

https://www.us-cert.gov/HIDDEN-COBRA-North-Korean-Malicious-Cyber-Activity