Indicators of Compromise | lazarus.day

IoCs

227 IoCs

Type	Value	First Seen	Last Seen
YARA	lazarus_capture	2020-03-09	2020-03-09
YARA	lazarus_rc4	2020-03-09	2020-03-09
YARA	themida_virtualizer	2020-03-09	2020-03-09
YARA	lazarus_sqcsvc	2020-03-09	2020-03-09
YARA	lazarus_forward_tcp	2020-03-09	2020-03-09
YARA	lazarus_forward_libcurl	2020-03-09	2020-03-09
YARA	yara_apt38_rc4	2020-03-09	2020-03-09
YARA	injectedDLL	2020-03-03	2020-03-03
YARA	AutoUpdate_dll	2020-03-03	2020-03-03
YARA	loader	2020-03-03	2020-03-03
YARA	lazarus_dtrack	2019-11-04	2019-11-04
YARA	LazarusDocJan2019_01	2019-02-12	2019-02-12
YARA	ROKRAT_payload	2018-02-27	2018-02-27
YARA	ROKRAT_loader	2018-02-27	2018-02-27
YARA	rivts_pdb	2018-02-15	2018-02-15

lazarus_capture

YARA

First seen: 2020-03-09 • Last seen: 2020-03-09

lazarus_rc4

YARA

First seen: 2020-03-09 • Last seen: 2020-03-09

themida_virtualizer

YARA

First seen: 2020-03-09 • Last seen: 2020-03-09

lazarus_sqcsvc

YARA

First seen: 2020-03-09 • Last seen: 2020-03-09

lazarus_forward_tcp

YARA

First seen: 2020-03-09 • Last seen: 2020-03-09

lazarus_forward_libcurl

YARA

First seen: 2020-03-09 • Last seen: 2020-03-09

yara_apt38_rc4

YARA

First seen: 2020-03-09 • Last seen: 2020-03-09

injectedDLL

YARA

First seen: 2020-03-03 • Last seen: 2020-03-03

AutoUpdate_dll

YARA

First seen: 2020-03-03 • Last seen: 2020-03-03

loader

YARA

First seen: 2020-03-03 • Last seen: 2020-03-03

lazarus_dtrack

YARA

First seen: 2019-11-04 • Last seen: 2019-11-04

LazarusDocJan2019_01

YARA

First seen: 2019-02-12 • Last seen: 2019-02-12

ROKRAT_payload

YARA

First seen: 2018-02-27 • Last seen: 2018-02-27

ROKRAT_loader

YARA

First seen: 2018-02-27 • Last seen: 2018-02-27

rivts_pdb

YARA

First seen: 2018-02-15 • Last seen: 2018-02-15

lazarus_capture

YARA

First seen: Mar 2020

Last seen: Mar 2020

lazarus_rc4

YARA

First seen: Mar 2020

Last seen: Mar 2020

themida_virtualizer

YARA

First seen: Mar 2020

Last seen: Mar 2020

lazarus_sqcsvc

YARA

First seen: Mar 2020

Last seen: Mar 2020

lazarus_forward_tcp

YARA

First seen: Mar 2020

Last seen: Mar 2020

lazarus_forward_libcurl

YARA

First seen: Mar 2020

Last seen: Mar 2020

yara_apt38_rc4

YARA

First seen: Mar 2020

Last seen: Mar 2020

injectedDLL

YARA

First seen: Mar 2020

Last seen: Mar 2020

AutoUpdate_dll

YARA

First seen: Mar 2020

Last seen: Mar 2020

loader

YARA

First seen: Mar 2020

Last seen: Mar 2020

lazarus_dtrack

YARA

First seen: Nov 2019

Last seen: Nov 2019

LazarusDocJan2019_01

YARA

First seen: Feb 2019

Last seen: Feb 2019

ROKRAT_payload

YARA

First seen: Feb 2018

Last seen: Feb 2018

ROKRAT_loader

YARA

First seen: Feb 2018

Last seen: Feb 2018

rivts_pdb

YARA

First seen: Feb 2018

Last seen: Feb 2018

1
«
11
12
13
14
15
»
16

⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.