Rewterz Threat Alert – Lazarus APT Group – Active IOCs - Rewterz
Tags
country: North Korea Japan South Korea United States Of America
attack-pattern: Data Malware - T1587.001 Malware - T1588.001 Private Keys - T1552.004 Private Keys - T1145
Show in Graph
Common Information
Type Value
UUID aa313892-94a9-4b71-b442-05baf76f769e
Fingerprint 3d4c9d54f1586df
Analysis status DONE
Considered CTI value 2
Text language
Published April 18, 2022, 5:01 p.m.
Added to db Dec. 19, 2024, 8:33 a.m.
Last updated Dec. 19, 2024, 8:21 p.m.
Headline Rewterz Threat Alert – Lazarus APT Group – Active IOCs
Title Rewterz Threat Alert – Lazarus APT Group – Active IOCs - Rewterz
Detected Hints/Tags/Attributes 44/2/12
Source URLs
Redirection Url
Details Source https://www.rewterz.com/rewterz-news/rewterz-threat-alert-lazarus-apt-group-active-iocs-38
URL Provider
Details Provider Source level domain
Details rewterz.com www.rewterz.com
Attributes
Details Type #Events CTI Value
Details CVE 3 
cve-2022-22391
Details Domain 2 
happy.nanoace.co.kr
Details Domain 2 
mariamchurch.com
Details Domain 2 
www.aumentarelevisite.com
Details md5 3 
b3a8c88297daecdb9b0ac54a3c107797
Details sha1 2 
46660f562fe01b5df0e1ac03dd44b4cc8d2fa5f5
Details sha256 2 
a881c9f40c1a5be3919cafb2ebe2bb5b19e29f0f7b28186ee1f4b554d692e776
Details IPv4 1 
52.79.118.195
Details IPv4 1 
61.81.50.174
Details Url 1 
http://happy.nanoace.co.kr/content/rating/themes/krajee-fas/frmameismngweb.asp
Details Url 1 
https://mariamchurch.com/board/news/index.asp
Details Url 1 
https://www.aumentarelevisite.com/img/context/offline.php