Indicators of Compromise | lazarus.day

IoCs

227 IoCs

Type	Value	First Seen	Last Seen
YARA	crime_ole_loadswf_cve_2018_4878	2018-02-02	2018-02-02
YARA	nkminer_monero	2018-01-08	2018-01-08
YARA	Unauthorized_Proxy_Server_RAT	2017-12-21	2017-12-21
YARA	success_fail_codes_fallchill	2017-11-14	2017-11-14
YARA	rc4_stack_key_fallchill	2017-11-14	2017-11-14
YARA	volgmer	2017-11-14	2017-11-14
YARA	Hermes2_1	2017-10-16	2017-10-16
YARA	lazaruswannacry	2017-05-15	2017-05-15
YARA	Wanna_Cry_Ransomware_Generic	2017-05-12	2017-05-12
YARA	AnomaliLABS_Lazarus_wipe_file_r…	2016-05-27	2016-05-27
YARA	Malwareusedbycyberthreatactor3	2014-12-19	2014-12-19
YARA	Malwareusedbycyberthreatactor2	2014-12-19	2014-12-19
YARA	Malwareusedbycyberthreatactor1	2014-12-19	2014-12-19
YARA	DestructiveTargetCleaningTool8	2014-12-19	2014-12-19
YARA	DestructiveTargetCleaningTool7	2014-12-19	2014-12-19

crime_ole_loadswf_cve_2018_4878

YARA

First seen: 2018-02-02 • Last seen: 2018-02-02

nkminer_monero

YARA

First seen: 2018-01-08 • Last seen: 2018-01-08

Unauthorized_Proxy_Server_RAT

YARA

First seen: 2017-12-21 • Last seen: 2017-12-21

success_fail_codes_fallchill

YARA

First seen: 2017-11-14 • Last seen: 2017-11-14

rc4_stack_key_fallchill

YARA

First seen: 2017-11-14 • Last seen: 2017-11-14

volgmer

YARA

First seen: 2017-11-14 • Last seen: 2017-11-14

Hermes2_1

YARA

First seen: 2017-10-16 • Last seen: 2017-10-16

lazaruswannacry

YARA

First seen: 2017-05-15 • Last seen: 2017-05-15

Wanna_Cry_Ransomware_Generic

YARA

First seen: 2017-05-12 • Last seen: 2017-05-12

AnomaliLABS_Lazarus_wipe_file_routine

YARA

First seen: 2016-05-27 • Last seen: 2016-05-27

Malwareusedbycyberthreatactor3

YARA

First seen: 2014-12-19 • Last seen: 2014-12-19

Malwareusedbycyberthreatactor2

YARA

First seen: 2014-12-19 • Last seen: 2014-12-19

Malwareusedbycyberthreatactor1

YARA

First seen: 2014-12-19 • Last seen: 2014-12-19

DestructiveTargetCleaningTool8

YARA

First seen: 2014-12-19 • Last seen: 2014-12-19

DestructiveTargetCleaningTool7

YARA

First seen: 2014-12-19 • Last seen: 2014-12-19

crime_ole_loadswf_cve_2018_4878

YARA

First seen: Feb 2018

Last seen: Feb 2018

nkminer_monero

YARA

First seen: Jan 2018

Last seen: Jan 2018

Unauthorized_Proxy_Server_RAT

YARA

First seen: Dec 2017

Last seen: Dec 2017

success_fail_codes_fallchill

YARA

First seen: Nov 2017

Last seen: Nov 2017

rc4_stack_key_fallchill

YARA

First seen: Nov 2017

Last seen: Nov 2017

volgmer

YARA

First seen: Nov 2017

Last seen: Nov 2017

Hermes2_1

YARA

First seen: Oct 2017

Last seen: Oct 2017

lazaruswannacry

YARA

First seen: May 2017

Last seen: May 2017

Wanna_Cry_Ransomware_Generic

YARA

First seen: May 2017

Last seen: May 2017

AnomaliLABS_Lazarus_wipe_file_routine

YARA

First seen: May 2016

Last seen: May 2016

Malwareusedbycyberthreatactor3

YARA

First seen: Dec 2014

Last seen: Dec 2014

Malwareusedbycyberthreatactor2

YARA

First seen: Dec 2014

Last seen: Dec 2014

Malwareusedbycyberthreatactor1

YARA

First seen: Dec 2014

Last seen: Dec 2014

DestructiveTargetCleaningTool8

YARA

First seen: Dec 2014

Last seen: Dec 2014

DestructiveTargetCleaningTool7

YARA

First seen: Dec 2014

Last seen: Dec 2014

1
«
12
13
14
15
16
»

⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.