Indicators of Compromise | lazarus.day

IoCs

208 IoCs

Type	Value	First Seen	Last Seen
YARA	success_fail_codes_fallchill	2017-11-14	2017-11-14
YARA	rc4_stack_key_fallchill	2017-11-14	2017-11-14
YARA	volgmer	2017-11-14	2017-11-14
YARA	Hermes2_1	2017-10-16	2017-10-16
YARA	lazaruswannacry	2017-05-15	2017-05-15
YARA	AnomaliLABS_Lazarus_wipe_file_r…	2016-05-27	2016-05-27
YARA	Malwareusedbycyberthreatactor3	2014-12-19	2014-12-19
YARA	Malwareusedbycyberthreatactor2	2014-12-19	2014-12-19
YARA	Malwareusedbycyberthreatactor1	2014-12-19	2014-12-19
YARA	DestructiveTargetCleaningTool8	2014-12-19	2014-12-19
YARA	DestructiveTargetCleaningTool7	2014-12-19	2014-12-19
YARA	DestructiveTargetCleaningTool6	2014-12-19	2014-12-19
YARA	DestructiveTargetCleaningTool5	2014-12-19	2014-12-19
YARA	DestructiveTargetCleaningTool4	2014-12-19	2014-12-19
YARA	DestructiveTargetCleaningTool3	2014-12-19	2014-12-19

success_fail_codes_fallchill

YARA

First seen: 2017-11-14 • Last seen: 2017-11-14

rc4_stack_key_fallchill

YARA

First seen: 2017-11-14 • Last seen: 2017-11-14

volgmer

YARA

First seen: 2017-11-14 • Last seen: 2017-11-14

Hermes2_1

YARA

First seen: 2017-10-16 • Last seen: 2017-10-16

lazaruswannacry

YARA

First seen: 2017-05-15 • Last seen: 2017-05-15

AnomaliLABS_Lazarus_wipe_file_routine

YARA

First seen: 2016-05-27 • Last seen: 2016-05-27

Malwareusedbycyberthreatactor3

YARA

First seen: 2014-12-19 • Last seen: 2014-12-19

Malwareusedbycyberthreatactor2

YARA

First seen: 2014-12-19 • Last seen: 2014-12-19

Malwareusedbycyberthreatactor1

YARA

First seen: 2014-12-19 • Last seen: 2014-12-19

DestructiveTargetCleaningTool8

YARA

First seen: 2014-12-19 • Last seen: 2014-12-19

DestructiveTargetCleaningTool7

YARA

First seen: 2014-12-19 • Last seen: 2014-12-19

DestructiveTargetCleaningTool6

YARA

First seen: 2014-12-19 • Last seen: 2014-12-19

DestructiveTargetCleaningTool5

YARA

First seen: 2014-12-19 • Last seen: 2014-12-19

DestructiveTargetCleaningTool4

YARA

First seen: 2014-12-19 • Last seen: 2014-12-19

DestructiveTargetCleaningTool3

YARA

First seen: 2014-12-19 • Last seen: 2014-12-19

success_fail_codes_fallchill

YARA

First seen: Nov 2017

Last seen: Nov 2017

rc4_stack_key_fallchill

YARA

First seen: Nov 2017

Last seen: Nov 2017

volgmer

YARA

First seen: Nov 2017

Last seen: Nov 2017

Hermes2_1

YARA

First seen: Oct 2017

Last seen: Oct 2017

lazaruswannacry

YARA

First seen: May 2017

Last seen: May 2017

AnomaliLABS_Lazarus_wipe_file_routine

YARA

First seen: May 2016

Last seen: May 2016

Malwareusedbycyberthreatactor3

YARA

First seen: Dec 2014

Last seen: Dec 2014

Malwareusedbycyberthreatactor2

YARA

First seen: Dec 2014

Last seen: Dec 2014

Malwareusedbycyberthreatactor1

YARA

First seen: Dec 2014

Last seen: Dec 2014

DestructiveTargetCleaningTool8

YARA

First seen: Dec 2014

Last seen: Dec 2014

DestructiveTargetCleaningTool7

YARA

First seen: Dec 2014

Last seen: Dec 2014

DestructiveTargetCleaningTool6

YARA

First seen: Dec 2014

Last seen: Dec 2014

DestructiveTargetCleaningTool5

YARA

First seen: Dec 2014

Last seen: Dec 2014

DestructiveTargetCleaningTool4

YARA

First seen: Dec 2014

Last seen: Dec 2014

DestructiveTargetCleaningTool3

YARA

First seen: Dec 2014

Last seen: Dec 2014

1
«
11
12
13
14
»

⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.