lazarus.day
Actors
Reports
Incidents
IoCs
Analytics
Actors
Reports
Incidents
IoCs
Support
https://content.dropboxapi.com/2/files/download
URL
First Seen: 2020-03-25
Last Seen: 2025-09-03
Share:
14
Related Reports
0
Related IOCs
Related Reports
2025-09-03
Sakai
김수키(Kimsuky) 외교광장.ps1 악성코드 분석 및 보안 수칙 ESET 탐지 PowerShell/Kimsuky.AX
#Kimsuky
2025-08-29
Seqrite
Operation HanKook Phantom: APT37 Spear-Phishing Campaign
#APT37
#LNK
#RokRAT
#T1102.002
#T1123
#T1027.013
#T1082
#T1566.001
#T1529
#T1087.001
#T1547.001
#T1140
#T1027.009
#T1005
#T1204.001
#T1070.004
#T1053.005
#T1041
#T1056.002
#T1113
#T1204.002
#T1055.009
#T1574.001
#T1055.001
#T1083
#T1059.001
#T1217
2025-05-12
Genians
한국 국가안보전략 싱크탱크 위장 APT37 공격 사례 분석 (작전명. 토이박스 스토리)
#APT37
#LNK
#RokRAT
#ToyBoxStory
2025-05-12
Genians
Analysis of APT37 Attack Case Disguised as a Think Tank for National Security Strategy in South Korea (Operation. ToyBox Story)
#APT37
#LNK
#ToyBoxStory
#RokRAT
2025-03-10
ZW01f
APT37 - RokRat
#APT37
#LNK
#RokRAT
2025-03-04
Logpresso
한글 문서로 위장한 두 공격 그룹의 악성코드 비교
#APT37
#Konni
#LNK
#RokRAT
2024-07-17
Sakai
북한 해킹 단체 김수키(Kimsuky)에서 만든 악성코드-근로신청서 관련의 건.docx.lnk(2024.7.9)
#Kimsuky
#LNK
2024-05-07
Ahnlab
LNK File Disguised as Certificate Distributing RokRAT Malware
#RokRAT
#LNK
#RedEyes
2024-04-23
Ahnlab
RokRAT 악성코드를 유포하는 LNK 파일 (수료증 위장)
#RokRAT
#LNK
#RedEyes
2024-04-10
somedieyoung ZZ
Kimsuky 4
#Kimsuky
#LNK
2024-04-03
Hauri
주중 한국대사관을 사칭한 스피어피싱 메일
#Kimsuky
2024-04-03
Plainbit
Analysis of ROKRAT Malware inside LNK Malicious file from North Korea
#RokRAT
#LNK
#T1055
#T1005
#T1059.003
#T1082
#T1566.001
#T1027.010
#T1083
#T1059.001
#T1102.002
#T1113
#T1106
#T1033
#T1204.002
#T1622
#T1027.009
2024-03-28
Sakai
김수키(Kimsuky) 가상화폐(암호 화폐)로 위장한 트레이딩 스파르타코스 강의안-100불남(2차).pdf(2024.1.22)
#Kimsuky
#LNK
2020-03-25
NSFOCUS
APT37 复盘分析报告(part2):木马与工具
#APT37
« Back
⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.