YARA | lazarus.day

#YARA

General

2017-11-14 • HIDDEN COBRA – North Korean Remote Administration Tool: FALLCHILL

34

Tagged Reports
24

Unique Authors
3,144

Active Days

Tagged Reports

2026-06-23

Cognyte

Lazarus Targets the Financial Sector with Memory-Only Malware Toolset

#Lazarus #Fileless #RemotePE #YARA #T1055 #T1027 #T1027.007 #T1105

2024-12-06

Proofpoint

A Better Way, YARA-X, Mach-O Feature Extraction, and Malware Similarity

#Youtube #AppleJeus #Bluenoroff #TraderTraitor #YARA

2024-11-13

Group-IB

Stealthy Attributes of APT Lazarus: Evading Detection with Extended Attributes

#Lazarus #RustyAttr #macOS #YARA #T1059.002 #T1105 #T1564 #T1059.004

2024-07-25

USCISA

North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs

#YARA #Andariel #T1190 #T1027 #T1595 #T1048 #T1592 #T1567 #T1071 #T1572 #T1591 #T1090 #T1021 #T1587.001 #T1560 #T1021.002 #T1039 #T1587.004 #T1087 #T1083 #T1040 #T1059 #T1596 #T1003

2024-06-07

Dimitribest

Kimsuky is targeting an arms manufacturer in Europe

#Kimsuky #YARA

2024-06-05

Ervin Zubic

Can We Adapt YARA to Fight DeFi Attacks? A Lazarus Group Case Study Sparks the Question

#DeFi #YARA

2024-03-25

Logpresso

Kimsuky의 TrollAgent를 탐지하는 YARA rule 작성가이드

#Kimsuky #TrollAgent #YARA

2024-03-17

Cyberpoking

H0lyGh0st (SiennaPurple) Ransomware

#H0lyGh0st #YARA

2024-03-14

Rusty Noob619

Detects a malicious DLL used by a North Korean Threat actor Lazarus

#YARA

2024-03-12

somedieyoung ZZ

Kimsuky 3

#Kimsuky #YARA

2024-03-07

knight0x07

Kimsuky-PS-Backdoor: Kimsuky PowerShell Backdoor Analysis

#Kimsuky #YARA

2024-02-19

KRNCSC

韓獨 합동 사이버 보안 권고문(北 방산분야 해킹)

#News #YARA #T1078 #T1140 #T1041 #T1572 #T1040 #T1133 #T1001 #T1213 #T1021 #T1071 #T1059 #T1046

2024-01-04

Greg Lesewich

100DaysofYARA - CosmicRust

#TA444 #CosmicRust #YARA

2024-01-03

Greg Lesewich

100DaysofYARA - SpectralBlur

#KANDYKORN #TA444 #YARA #SpectralBlur

2024-01-01

Greg Lesewich

100DaysofYARA - In Memory Detection

#YARA #TA430

« Back