Lazarus_RemotePE_DPAPI_Encrypted_config | lazarus.day

Lazarus_RemotePE_DPAPI_Encrypted_config

YARA Rule

First Seen: 2026-05-22
Last Seen: 2026-06-23

2

Related Reports
0

Related IOCs

Related Reports

2026-06-23

Cognyte

Lazarus Targets the Financial Sector with Memory-Only Malware Toolset

#Lazarus #Fileless #RemotePE #YARA #T1055 #T1027 #T1027.007 #T1105

2026-05-22

Foxit

RemotePE: The Lazarus RAT that lives in memory

#Lazarus #RemotePE

⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.