Indicators of Compromise | lazarus.day

IoCs

223 IoCs

Type	Value	First Seen	Last Seen
YARA	lazarus_grease2	2023-02-02	2023-02-02
YARA	lazarus_dtrack_unpacked	2023-02-02	2023-02-02
YARA	lazarus_dtrack_unpacked	2023-02-02	2023-02-02
YARA	MAL_MATA_Beacon_Command_Opcodes	2023-01-18	2023-01-18
YARA	MAL_MATA_SendPacket_Command_Opc…	2023-01-18	2023-01-18
YARA	SUSP_Macho_AES_CBC_Mode_XOR	2023-01-18	2023-01-18
YARA	SUSP_Macho_Library_StackString	2023-01-18	2023-01-18
YARA	MAL_CloudMensis_FlowEncrypt	2023-01-16	2023-01-16
YARA	MAL_CloudMensis_FlowEncrypt	2023-01-16	2023-01-16
YARA	APT_NK_APT37_CloudMensis_ClassD…	2023-01-16	2023-01-16
YARA	follow_the_fallchill_call	2022-07-31	2022-07-31
YARA	SiennaBlue	2022-07-14	2022-07-14
YARA	SiennaPurple	2022-07-14	2022-07-14
YARA	MauiRansomware	2022-07-06	2022-07-06
YARA	NK_APT_AppleSeed_Backdoor	2022-06-05	2022-06-05

lazarus_grease2

YARA

First seen: 2023-02-02 • Last seen: 2023-02-02

lazarus_dtrack_unpacked

YARA

First seen: 2023-02-02 • Last seen: 2023-02-02

lazarus_dtrack_unpacked

YARA

First seen: 2023-02-02 • Last seen: 2023-02-02

MAL_MATA_Beacon_Command_Opcodes

YARA

First seen: 2023-01-18 • Last seen: 2023-01-18

MAL_MATA_SendPacket_Command_Opcodes

YARA

First seen: 2023-01-18 • Last seen: 2023-01-18

SUSP_Macho_AES_CBC_Mode_XOR

YARA

First seen: 2023-01-18 • Last seen: 2023-01-18

SUSP_Macho_Library_StackString

YARA

First seen: 2023-01-18 • Last seen: 2023-01-18

MAL_CloudMensis_FlowEncrypt

YARA

First seen: 2023-01-16 • Last seen: 2023-01-16

MAL_CloudMensis_FlowEncrypt

YARA

First seen: 2023-01-16 • Last seen: 2023-01-16

APT_NK_APT37_CloudMensis_ClassData

YARA

First seen: 2023-01-16 • Last seen: 2023-01-16

follow_the_fallchill_call

YARA

First seen: 2022-07-31 • Last seen: 2022-07-31

SiennaBlue

YARA

First seen: 2022-07-14 • Last seen: 2022-07-14

SiennaPurple

YARA

First seen: 2022-07-14 • Last seen: 2022-07-14

MauiRansomware

YARA

First seen: 2022-07-06 • Last seen: 2022-07-06

NK_APT_AppleSeed_Backdoor

YARA

First seen: 2022-06-05 • Last seen: 2022-06-05

lazarus_grease2

YARA

First seen: Feb 2023

Last seen: Feb 2023

lazarus_dtrack_unpacked

YARA

First seen: Feb 2023

Last seen: Feb 2023

lazarus_dtrack_unpacked

YARA

First seen: Feb 2023

Last seen: Feb 2023

MAL_MATA_Beacon_Command_Opcodes

YARA

First seen: Jan 2023

Last seen: Jan 2023

MAL_MATA_SendPacket_Command_Opcodes

YARA

First seen: Jan 2023

Last seen: Jan 2023

SUSP_Macho_AES_CBC_Mode_XOR

YARA

First seen: Jan 2023

Last seen: Jan 2023

SUSP_Macho_Library_StackString

YARA

First seen: Jan 2023

Last seen: Jan 2023

MAL_CloudMensis_FlowEncrypt

YARA

First seen: Jan 2023

Last seen: Jan 2023

MAL_CloudMensis_FlowEncrypt

YARA

First seen: Jan 2023

Last seen: Jan 2023

APT_NK_APT37_CloudMensis_ClassData

YARA

First seen: Jan 2023

Last seen: Jan 2023

follow_the_fallchill_call

YARA

First seen: Jul 2022

Last seen: Jul 2022

SiennaBlue

YARA

First seen: Jul 2022

Last seen: Jul 2022

SiennaPurple

YARA

First seen: Jul 2022

Last seen: Jul 2022

MauiRansomware

YARA

First seen: Jul 2022

Last seen: Jul 2022

NK_APT_AppleSeed_Backdoor

YARA

First seen: Jun 2022

Last seen: Jun 2022

1
«
7
8
9
10
11
»
15

⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.