Indicators of Compromise | lazarus.day

IoCs

208 IoCs

Type	Value	First Seen	Last Seen
YARA	TAXHAUL	2023-04-11	2023-04-11
YARA	Armageddon_Pteranodon	2023-03-28	2023-03-28
YARA	apt_Reaper_MFC42_Loader	2023-03-16	2023-03-16
YARA	apt_Reaper_AblyGo_Reverse_Shell	2023-03-16	2023-03-16
YARA	apt_Reaper_Chinotto_PowerShell_…	2023-03-16	2023-03-16
YARA	APT_Reaper_Chinotto	2023-03-16	2023-03-16
YARA	lazarus_bindshell	2023-02-02	2023-02-02
YARA	lazarus_grease2	2023-02-02	2023-02-02
YARA	lazarus_dtrack_unpacked	2023-02-02	2023-02-02
YARA	lazarus_dtrack_unpacked	2023-02-02	2023-02-02
YARA	MAL_MATA_Beacon_Command_Opcodes	2023-01-18	2023-01-18
YARA	MAL_MATA_SendPacket_Command_Opc…	2023-01-18	2023-01-18
YARA	SUSP_Macho_AES_CBC_Mode_XOR	2023-01-18	2023-01-18
YARA	SUSP_Macho_Library_StackString	2023-01-18	2023-01-18
YARA	MAL_CloudMensis_FlowEncrypt	2023-01-16	2023-01-16

TAXHAUL

YARA

First seen: 2023-04-11 • Last seen: 2023-04-11

Armageddon_Pteranodon

YARA

First seen: 2023-03-28 • Last seen: 2023-03-28

apt_Reaper_MFC42_Loader

YARA

First seen: 2023-03-16 • Last seen: 2023-03-16

apt_Reaper_AblyGo_Reverse_Shell

YARA

First seen: 2023-03-16 • Last seen: 2023-03-16

apt_Reaper_Chinotto_PowerShell_Variant

YARA

First seen: 2023-03-16 • Last seen: 2023-03-16

APT_Reaper_Chinotto

YARA

First seen: 2023-03-16 • Last seen: 2023-03-16

lazarus_bindshell

YARA

First seen: 2023-02-02 • Last seen: 2023-02-02

lazarus_grease2

YARA

First seen: 2023-02-02 • Last seen: 2023-02-02

lazarus_dtrack_unpacked

YARA

First seen: 2023-02-02 • Last seen: 2023-02-02

lazarus_dtrack_unpacked

YARA

First seen: 2023-02-02 • Last seen: 2023-02-02

MAL_MATA_Beacon_Command_Opcodes

YARA

First seen: 2023-01-18 • Last seen: 2023-01-18

MAL_MATA_SendPacket_Command_Opcodes

YARA

First seen: 2023-01-18 • Last seen: 2023-01-18

SUSP_Macho_AES_CBC_Mode_XOR

YARA

First seen: 2023-01-18 • Last seen: 2023-01-18

SUSP_Macho_Library_StackString

YARA

First seen: 2023-01-18 • Last seen: 2023-01-18

MAL_CloudMensis_FlowEncrypt

YARA

First seen: 2023-01-16 • Last seen: 2023-01-16

TAXHAUL

YARA

First seen: Apr 2023

Last seen: Apr 2023

Armageddon_Pteranodon

YARA

First seen: Mar 2023

Last seen: Mar 2023

apt_Reaper_MFC42_Loader

YARA

First seen: Mar 2023

Last seen: Mar 2023

apt_Reaper_AblyGo_Reverse_Shell

YARA

First seen: Mar 2023

Last seen: Mar 2023

apt_Reaper_Chinotto_PowerShell_Variant

YARA

First seen: Mar 2023

Last seen: Mar 2023

APT_Reaper_Chinotto

YARA

First seen: Mar 2023

Last seen: Mar 2023

lazarus_bindshell

YARA

First seen: Feb 2023

Last seen: Feb 2023

lazarus_grease2

YARA

First seen: Feb 2023

Last seen: Feb 2023

lazarus_dtrack_unpacked

YARA

First seen: Feb 2023

Last seen: Feb 2023

lazarus_dtrack_unpacked

YARA

First seen: Feb 2023

Last seen: Feb 2023

MAL_MATA_Beacon_Command_Opcodes

YARA

First seen: Jan 2023

Last seen: Jan 2023

MAL_MATA_SendPacket_Command_Opcodes

YARA

First seen: Jan 2023

Last seen: Jan 2023

SUSP_Macho_AES_CBC_Mode_XOR

YARA

First seen: Jan 2023

Last seen: Jan 2023

SUSP_Macho_Library_StackString

YARA

First seen: Jan 2023

Last seen: Jan 2023

MAL_CloudMensis_FlowEncrypt

YARA

First seen: Jan 2023

Last seen: Jan 2023

1
«
6
7
8
9
10
»
14

⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.