lazarus.day
Actors
Reports
Incidents
IoCs
Analytics
Actors
Reports
Incidents
IoCs
Support
dhl.com
Domain
Resolved IPs:
199.40.254.32
First Seen: 2023-09-26
Last Seen: 2025-08-29
Shortcuts:
Censys
Criminal IP
Virustotal
any.run
urlscan
Share:
3
Related Reports
1
Related IOCs
Related Reports
2025-08-29
ENKI
국내 IP에서 유포된 PureCrypter 적용 Formbook 페이로드 분석
#Kimsuky
#T1055.012
#T1047
#T1622
#T1027.002
#T1071
#T1057
#T1082
#T1134.001
#T1059.003
#T1566.001
#T1573.001
#T1665
#T1547.001
#T1140
#T1005
#T1041
#T1132.001
#T1204.002
#T1055.002
#T1070.010
#T1055.003
#T1115
#T1059.001
#T1027.014
#T1497.001
#T1095
2023-12-04
Sakai
북한 해킹 단체 APT37 에서 만든 악성코드-국군재정관리단.chm(2023.11.21)
#APT37
#CHM
2023-09-26
Sakai
김수키(Kimsuky) 사례비 지급의서로 위장한 악성코드-231025 (통일부 통일정책실)윤석열 정부의 대북 정책 관련 1.5트랙 전문가 간담회(비공개) 기획안.hwp.lnk(2023.9.14)
#Kimsuky
#LNK
« Back
⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.