Indicators of Compromise | lazarus.day

IoCs

32,085 IoCs

Type	Value	First Seen	Last Seen
DOMAIN	kozow.com	2020-06-24	2020-06-26
DOMAIN	dynu.com	2020-06-24	2020-06-26
DOMAIN	itemdb.com	2020-06-24	2020-06-26
DOMAIN	itsaol.com	2020-06-24	2020-06-26
DOMAIN	publicvm.com	2017-12-19	2020-06-26
DOMAIN	bmail-org.com	2020-06-25	2020-06-25
IPv4	104.18.37.55	2020-06-25	2020-06-25
DOMAIN	fireeye.fr	2020-06-25	2020-06-25
IPv4	172.64.150.201	2020-06-25	2020-06-25
DOMAIN	www.fireeye.fr	2020-06-25	2020-06-25
HASH	1e14ded758c5dd7b41fe20297935eeef	2020-06-25	2020-06-25
EMAIL	[email protected]	2020-06-25	2020-06-25
URL	http://www.fireeye.fr/blog/thre…	2020-06-25	2020-06-25
URL	https://paste.cryptolaemus.com/…	2020-06-25	2020-06-25
DOMAIN	security-confirm.bmail-org.com	2020-06-25	2020-06-25

kozow.com

DOMAIN

Related: 162.216.242.208

First seen: 2020-06-24 • Last seen: 2020-06-26

dynu.com

DOMAIN

Related: 72.51.58.29

First seen: 2020-06-24 • Last seen: 2020-06-26

itemdb.com

DOMAIN

Related: 204.16.169.54

First seen: 2020-06-24 • Last seen: 2020-06-26

itsaol.com

DOMAIN

Related: 204.16.169.54

First seen: 2020-06-24 • Last seen: 2020-06-26

publicvm.com

DOMAIN

Related: 64.182.209.151

First seen: 2017-12-19 • Last seen: 2020-06-26

bmail-org.com

DOMAIN

First seen: 2020-06-25 • Last seen: 2020-06-25

104.18.37.55

IPv4

Related: AS13335

First seen: 2020-06-25 • Last seen: 2020-06-25

fireeye.fr

DOMAIN

Related: 104.18.37.55, 172.64.150.201

First seen: 2020-06-25 • Last seen: 2020-06-25

172.64.150.201

IPv4

Related: AS13335

First seen: 2020-06-25 • Last seen: 2020-06-25

www.fireeye.fr

DOMAIN

Related: 104.18.37.55, fireeye.fr, 172.64.150.201

First seen: 2020-06-25 • Last seen: 2020-06-25

1e14ded758c5dd7b41fe20297935eeef

HASH

First seen: 2020-06-25 • Last seen: 2020-06-25

[email protected]

EMAIL

First seen: 2020-06-25 • Last seen: 2020-06-25

http://www.fireeye.fr/blog/threat-research/2014/02/operation-greedywonk-multiple-economic-and-foreign-policy-sites-compromised-serving-up-flash-zero-day-exploit.html

URL

Related: www.fireeye.fr

First seen: 2020-06-25 • Last seen: 2020-06-25

https://paste.cryptolaemus.com/emotet/2020/06/22/emotet-c2-rsa-update-06-22-20-1.html

URL

First seen: 2020-06-25 • Last seen: 2020-06-25

security-confirm.bmail-org.com

DOMAIN

Related: bmail-org.com

First seen: 2020-06-25 • Last seen: 2020-06-25

kozow.com

DOMAIN

162.216.242.208

First seen: Jun 2020

Last seen: Jun 2020

dynu.com

DOMAIN

72.51.58.29

First seen: Jun 2020

Last seen: Jun 2020

itemdb.com

DOMAIN

204.16.169.54

First seen: Jun 2020

Last seen: Jun 2020

itsaol.com

DOMAIN

204.16.169.54

First seen: Jun 2020

Last seen: Jun 2020

publicvm.com

DOMAIN

64.182.209.151

First seen: Dec 2017

Last seen: Jun 2020

bmail-org.com

DOMAIN

First seen: Jun 2020

Last seen: Jun 2020

104.18.37.55

IPv4

AS13335

First seen: Jun 2020

Last seen: Jun 2020

fireeye.fr

DOMAIN

104.18.37.55, 172.64.150.201

First seen: Jun 2020

Last seen: Jun 2020

172.64.150.201

IPv4

AS13335

First seen: Jun 2020

Last seen: Jun 2020

www.fireeye.fr

DOMAIN

104.18.37.55, fireeye.fr, 172.64.150.201

First seen: Jun 2020

Last seen: Jun 2020

1e14ded758c5dd7b41fe20297935eeef

HASH

First seen: Jun 2020

Last seen: Jun 2020

[email protected]

EMAIL

First seen: Jun 2020

Last seen: Jun 2020

http://www.fireeye.fr/blog/threat-research/2014/02/operation-greedywonk-multiple-economic-and-foreign-policy-sites-compromised-serving-up-flash-zero-day-exploit.html

URL

www.fireeye.fr

First seen: Jun 2020

Last seen: Jun 2020

https://paste.cryptolaemus.com/emotet/2020/06/22/emotet-c2-rsa-update-06-22-20-1.html

URL

First seen: Jun 2020

Last seen: Jun 2020

security-confirm.bmail-org.com

DOMAIN

bmail-org.com

First seen: Jun 2020

Last seen: Jun 2020

⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.