Lazarus targets nuclear-related organization with new malware
Tags
cmtmf-attack-pattern: Masquerading
maec-delivery-vectors: Watering Hole
attack-pattern: Data Dll Side-Loading - T1574.002 Exploits - T1587.004 Exploits - T1588.005 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Server - T1583.004 Server - T1584.004 Software - T1592.002 Ssh - T1021.004 Vnc - T1021.005 Web Services - T1583.006 Web Services - T1584.006 Tool - T1588.002 Dll Side-Loading - T1073 Masquerading - T1036 Remote Access Tools - T1219 Masquerading
Show in Graph
Common Information
Type Value
UUID 0266455d-c951-4f21-aef3-40c8ac41e90d
Fingerprint b7009119a5a785eb
Analysis status DONE
Considered CTI value 2
Text language
Published Dec. 19, 2024, 10 a.m.
Added to db Dec. 21, 2024, 4:23 a.m.
Last updated Dec. 23, 2024, 12:09 p.m.
Headline Lazarus group evolves its infection chain with old and new malware
Title Lazarus targets nuclear-related organization with new malware
Detected Hints/Tags/Attributes 76/3/41
Source URLs
Redirection Url
Details Source https://securelist.com/lazarus-new-malware/115059/
Details Source https://malware.news/t/lazarus-group-evolves-its-infection-chain-with-old-and-new-malware/89564
URL Provider
Details Provider Source level domain
Details malware.news malware.news
Details securelist.com securelist.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 158 ✔ Malware Analysis, News and Indicators - Latest topics https://malware.news/latest.rss 2024-08-30 22:08
Details 223 ✔ Securelist https://securelist.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 2 
msado.inc
Details File 6 
amazonvnc.exe
Details File 4 
vncviewer.exe
Details File 406 
readme.txt
Details File 1 
_skill_assessment_new.zip
Details File 4 
vnclang.dll
Details File 1 
_media.dat
Details File 4 
libcrypto.dll
Details File 1 
c:\programdata \adobe   camerasettingsuih ost.exe
Details File 25 
dui70.dll
Details File 1 
ost.exe
Details File 1 
c:\programdata \intel   dxpserver.exe
Details File 13 
dwmapi.dll
Details File 2 
msado.inc
Details File 2 
tbaseinfo.dll
Details File 1 
sleep.dll
Details File 2 
hiber.dll
Details File 1 
ibm_vn_it_sa.iso
Details File 1 
f_xnsqlexp.dll
Details File 2 
compareplus.dll
Details File 1 
hexeditor.dll
Details File 5 
binhex.dll
Details md5 2 
c6323a40d1aa5b7fe95951609fb2b524
Details md5 2 
cf8c0999c148d764667b1a269c28bdcb
Details md5 2 
37973e29576db8a438250a156977ccdf
Details md5 2 
d966af7764dfeb8bf2a0feea503be0fd
Details md5 2 
778942b891c4e2f3866c6a3c09bf74f4
Details md5 2 
1315027e1c536d488fe63ea0a528b52d
Details md5 2 
b0e795853b655682483105e353b9cd54
Details md5 2 
e0dd4afb965771f8347549fd93423985
Details md5 2 
739875852198ecf4d734d41ef1576774
Details md5 2 
bf5a3505273391c5380b3ab545e400eb
Details md5 2 
0ee8246de53c20a424fb08096922db08
Details md5 2 
80ab98c10c23b7281a2bf1489fc98c0d
Details md5 2 
4c4abe85a1c68ba8385d2cb928ac5646
Details md5 2 
e6a1977ecce2ced5a471baa52492d9f3
Details md5 2 
fdc5505d7277e0bf7b299957eadfd931
Details md5 2 
2b2cbc8de3bdefcd7054f56b70ef58b4
Details md5 2 
57453d6d918235adb66b896e5ab252b6
Details md5 2 
00a2952a279f9c84ae71367d5b8990c1
Details md5 2 
5eac943e23429a77d9766078e760fc0b