lazarus.day
Actors
Reports
Incidents
IoCs
Analytics
Actors
Reports
Incidents
IoCs
Support
https://content.dropboxapi.com/2/files/upload
URL
First Seen: 2018-09-21
Last Seen: 2025-09-03
Share:
16
Related Reports
0
Related IOCs
Related Reports
2025-09-03
Sakai
김수키(Kimsuky) 외교광장.ps1 악성코드 분석 및 보안 수칙 ESET 탐지 PowerShell/Kimsuky.AX
#Kimsuky
2025-08-29
Seqrite
Operation HanKook Phantom: APT37 Spear-Phishing Campaign
#APT37
#LNK
#RokRAT
#T1102.002
#T1123
#T1027.013
#T1082
#T1566.001
#T1529
#T1087.001
#T1547.001
#T1140
#T1027.009
#T1005
#T1204.001
#T1070.004
#T1053.005
#T1041
#T1056.002
#T1113
#T1204.002
#T1055.009
#T1574.001
#T1055.001
#T1083
#T1059.001
#T1217
2025-05-12
Genians
한국 국가안보전략 싱크탱크 위장 APT37 공격 사례 분석 (작전명. 토이박스 스토리)
#APT37
#LNK
#RokRAT
#ToyBoxStory
2025-05-12
Genians
Analysis of APT37 Attack Case Disguised as a Think Tank for National Security Strategy in South Korea (Operation. ToyBox Story)
#APT37
#LNK
#ToyBoxStory
#RokRAT
2025-03-10
ZW01f
APT37 - RokRat
#APT37
#LNK
#RokRAT
2025-03-04
Logpresso
한글 문서로 위장한 두 공격 그룹의 악성코드 비교
#APT37
#Konni
#LNK
#RokRAT
2025-02-19
Kandji
DPRK DriverEasy & ChromeUpdate Deep Dive
#ContagiousInterview
#DriverEasy
2025-02-03
Sentinel One
macOS FlexibleFerret | Further Variants of DPRK Malware Family Unearthed
#ContagiousInterview
#FlexibleFerret
#macOS
#FrostyFerret
2024-11-27
Sakai
북한 김수키(Kimsuky)양도소득 과세표준 신고 및 납부계산서 로 위장한 악성코드-out.lnk(2024.11.26)
#Kimsuky
#LNK
2024-07-17
Sakai
북한 해킹 단체 김수키(Kimsuky)에서 만든 악성코드-근로신청서 관련의 건.docx.lnk(2024.7.9)
#Kimsuky
#LNK
2024-05-07
Ahnlab
LNK File Disguised as Certificate Distributing RokRAT Malware
#RokRAT
#LNK
#RedEyes
2024-04-23
Ahnlab
RokRAT 악성코드를 유포하는 LNK 파일 (수료증 위장)
#RokRAT
#LNK
#RedEyes
2024-04-03
Plainbit
Analysis of ROKRAT Malware inside LNK Malicious file from North Korea
#RokRAT
#LNK
#T1055
#T1005
#T1059.003
#T1082
#T1566.001
#T1027.010
#T1083
#T1059.001
#T1102.002
#T1113
#T1106
#T1033
#T1204.002
#T1622
#T1027.009
2023-01-16
Greg Lesewich
YARA-ing with MacOS
#YARA
#APT37
#CloudMensis
#RokRAT
2020-03-25
NSFOCUS
APT37 复盘分析报告(part2):木马与工具
#APT37
2018-09-21
v3lo
ROKRAT is Back
#RokRAT
« Back
⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.