Lazarus BTC Changer
Tags
country: Italy
attack-pattern: Data Control Panel - T1218.002 Exploits - T1587.004 Exploits - T1588.005 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Web Shell - T1505.003 Tool - T1588.002 Vulnerabilities - T1588.006 Web Shell - T1100
Show in Graph
Common Information
Type Value
UUID 55e973d2-fd27-4c25-81c0-331bcd248287
Fingerprint c9011051002383ca
Analysis status DONE
Considered CTI value 2
Text language
Published April 14, 2021, midnight
Added to db Aug. 31, 2024, 12:15 a.m.
Last updated Oct. 31, 2024, 10:55 a.m.
Headline UNKNOWN
Title Lazarus BTC Changer
Detected Hints/Tags/Attributes 56/2/27
Source URLs
Redirection Url
Details Source https://blog.group-ib.com/btc_changer
URL Provider
Details Provider Source level domain
Details group-ib.com blog.group-ib.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 36 ✔ Blog Group-IB https://blog.group-ib.com/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 2 
stefanoturco.com
Details Domain 3 
technokain.com
Details Domain 4 
darvishkhan.net
Details Domain 2 
areac-agr.com
Details Domain 2 
luxmodelagency.com
Details Domain 2 
signedbooksandcollectibles.com
Details Domain 1 
realchems.com
Details Domain 1 
www.wongsjewellers.co.uk
Details Domain 5 
coinpayments.net
Details Domain 14 
www.blockchain.com
Details sha256 1 
51043929f82412a87be8fc315f73c0fc41dd46ae8e45d3e427d03df9dbe8c9e5
Details sha256 1 
c8f27cf9b6fe3de41642c75f64ce955a094a646d907ca2937534ec0d81bdd6d1
Details sha256 1 
fb3f47bbd5fe5b7a89f7305688823cd7b986693eeae3a26bcdaf94c318a8bcd3
Details sha256 1 
d36a330038c7ec5b04c6e5da42071083d87806447b2236fcaa964bfef302a82b
Details sha256 1 
06ac32672777f4b7b3e890a9afabde9af3fee85c8d8a83429c5fadd04c298309
Details sha256 1 
79570a46d94301c0b89a8fd0539b0770bc375829b1c42d1ee8e0d4b7b44f8f7c
Details sha256 1 
e889dc3c95d160c30d675351e6ba1050e0d2ef04ce0b6074277c422a215e932e
Details Threat Actor Identifier - APT-C 30 
APT-C-26
Details Threat Actor Identifier - APT 144 
APT38
Details Url 1 
https://realchems.com
Details Url 1 
https://www.wongsjewellers.co.uk
Details Url 1 
https://www.blockchain.com/btc/tx/a929c7d3b7ae58eb5b833460017016267f7ac66cbd16ad0
Details Url 1 
https://www.blockchain.com/btc/tx/d64045015d066aaa0187e822eebbe25437785d5c56be1a
Details Url 1 
https://www.blockchain.com/btc/tx/5b3b34e8fdb642b028361799df5ac3955f38653f746f98c67
Details Url 1 
https://www.blockchain.com/btc/tx/a305aee9b7916ae34cefe9d3b2665271e027af52fdf57d6e
Details Url 1 
https://www.blockchain.com/btc/tx/8ad539d33b3a9bcbc777ff252eb125c389d761c491750b4
Details Url 1 
https://www.blockchain.com/btc/tx/6acd5930f026c8163c1a742b7229acbceff7f9d317b9328f5