FALLCHILL-lazarusholic

#FALLCHILL

Tool/Malware

FALLCHILL is a RAT that has been used by Lazarus Group since at least 2016 to target the aerospace, telecommunications, and finance industries. It is usually dropped by other Lazarus Group malware or delivered when a victim unknowingly visits a compromised website.

https://attack.mitre.org/software/S0181/

Reports

2023-08-28
KRCERT
Lazarus Group’s Undercover Operations : Large-Scale Infection Campaigns 2022-2023
#DreamJob #GoldGoblin #FALLCHILL #Slides #BookCodes

2022-07-31
Xorhex
YARA - FOLLOWING FALLCHILL'S E8 CALL
#FALLCHILL

2021-09-07
Lifars
A Detailed Analysis of Lazarus’ RAT Called FALLCHILL
#FALLCHILL

2018-03-07
Tencent
Lazarus APT组织最新活动揭露
#T-APT-15 #FALLCHILL #CVE-2018-4878

2017-11-28
Fortinet
A Deep Dive Analysis of the FALLCHILL Remote Administration Tool
#FALLCHILL

2017-11-14
USCISA
HIDDEN COBRA – North Korean Remote Administration Tool: FALLCHILL
#HiddenCobra #FALLCHILL #YARA