#Mimikatz

Malware/Tool

2018-04-03 • Lazarus KillDisks Central American casino

An open-source credential-extraction tool; the attackers used a modified version to extract hashes for currently logged-in Windows users.

16

Tagged Reports
12

Unique Authors
1,840

Active Days

Tagged Reports

2023-04-16

Kaspersky

Perfect Smoke and Mirrors of Enemy: Following Lazarus group by tracking DeathNote Campaign

#DreamJob #DeathNote #Youtube #Lazarus #BLINDINGCAN #Manuscrypt #Mimikatz

2023-04-12

Kaspersky

Following the Lazarus group by tracking DeathNote campaign

#DeathNote #DreamJob #BLINDINGCAN #Copperhedge #LPEClient #Lazarus #Manuscrypt #Mimikatz

2023-04-11

Kaspersky

Perfect Smoke and Mirrors of Enemy: Following Lazarus group by tracking DeathNote campaign

#DeathNote #DreamJob #BLINDINGCAN #Copperhedge #LPEClient #Lazarus #Manuscrypt #Mimikatz #ThreatNeedle

2023-02-02

With Secure

No Pineapple! - DPRK Targeting of Medical Research and Technology Sector

#Whitepaper #NoPineapple #DTrack #GREASE #Zimbra #T1090.001 #T1136 #T1190 #T1012 #T1016 #T1106 #T1018 #T1071 #T1070.007 #T1057 #T1082 #T1119 #T1556 #T1037.005 #T1003.001 #T1553 #T1049 #T1087.002 #T1078 #T1070.004 #T1587.002 #T1053.005 #T1041 #T1505.003 #T1560 #T1071.001 #T1090.002 #T1083 #T1114.002 #T1033 #T1036.005 #T1021.001 #T1074 #T1059 #T1569.002 #Lazarus #CobaltStrike #Mimikatz #JspSpy #CVE-2022-27925 #CVE-2022-37042 #CVE-2021-4034 #CVE-2021-34527

2022-09-08

Cisco Talos

Lazarus and the tale of three RATs

#VSingle #MagicRAT #YamaBot #T1562 #T1136 #T1190 #T1608 #T1543 #T1082 #T1090 #T1021 #T1140 #T1518 #T1219 #T1560 #T1547 #T1590 #T1087 #T1070 #T1083 #T1053 #T1033 #T1003 #Lazarus #Mimikatz #VMwareHorizon

2022-04-27

Symantec

Stonefly: North Korea-linked Spying Operation Continues to Hit High-value Targets

#Stonefly #Pompilus #CVE-2021-44228 #DTrack #Mimikatz

2020-12-15

Hvs-consulting

Greetings from Lazarus

#YARA #Lazarus #Whitepaper #T1005 #T1070.004 #T1566.001 #T1497 #T1068 #T1003.001 #T1204.002 #T1021.002 #T1039 #T1552.001 #T1560.001 #T1547.001 #T1135 #T1048 #T1071.001 #T1136.001 #T1087.002 #Mimikatz #AdFind #EternalBlue #b374k

2020-10-23

With Secure

Catching Lazarus: Threat Intelligence to Real Detection Logic - Part Two

#Lazarus #T1562.001 #T1053.005 #T1003.001 #T1055.002 #T1021.001 #T1070.001 #T1021.005 #Mimikatz

2020-08-18

With Secure

Lazarus group Campaign Targeting The Cryptocurrency Vertical

#Whitepaper #YARA #Lazarus #T1059.005 #T1566.003 #T1552.001 #T1543.003 #T1027.002 #T1059.003 #T1003.001 #T1021.005 #T1070.004 #T1053.005 #T1078.002 #T1055.002 #T1070.001 #T1071.001 #T1112 #T1547.005 #T1083 #T1218.005 #T1059.001 #T1021.001 #Mimikatz

2020-06-26

Atlas-cybersecurity

CryptoCore – Cryptocurrency Exchanges Under Attack

#CryptoCore #Mimikatz

2020-06-24

Clearskysec

A Threat Actor Targeting Cryptocurrency Exchanges

#CryptoCore #Whitepaper #Mimikatz

2020-05-30

Dragos

WASSONITE Threat Group

#WASSONITE #KKNPP #DTrack #Mimikatz

2019-01-29

MITRE

APT38

#G0082 #APT38 #T1562 #T1543 #T1106 #T1027 #T1071 #T1057 #T1056 #T1082 #T1566 #T1529 #T1485 #T1135 #T1049 #T1218 #T1005 #T1518 #T1505 #T1561 #T1105 #T1588 #T1565 #T1115 #T1070 #T1112 #T1083 #T1053 #T1486 #T1189 #T1569 #T1033 #T1110 #T1204 #T1059 #T1217 #QUICKRIDE #KEYLIME #NACHOCHEESE #DYEPACK #DYEPACK.FOX #BOOTWRECK #CLOSESHAVE #Nestegg #CLEANTOAD #Mimikatz #MAPMAKER

2018-10-03

Fireeye

APT38 Un-usual Suspects

#APT38 #NACHOCHEESE #KEYLIME #QUICKRIDE #ActiveX #SWIFT #CVE-2015-8651 #CVE-2016-1019 #CVE-2016-4119 #BLINDTOAD #BOOTWRECK #CHEESETRAY #CLEANTOAD #CLOSESHAVE #DarkComet #DYEPACK #DYEPACK.FOX #HOTWAX #JspSpy #MAPMAKER #Mimikatz #Nestegg #QUICKCAFE #QUICKRIDE.POWER #RAWHIDE #REDSHAWL #SCRUBBRUSH #SHADYCAT #SLIMDOWN #SMOOTHRIDE #SORRYBRUTE #TightVNC #VMProtect #WHITEOUT #WORMHOLE

2018-08-21

Trend Micro

Supply Chain Attack Operation Red Signature Targets South Korean Organizations

#RedSignature #RSupport #9002RAT #Mimikatz #PlugX

« Back