Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE17 IOCs
Operation FlashHole: Lazarus breaks security, defies control
Threat Actors
Diamond Model
Adversary(2)
Infrastructure(6)
Capability
Victim
Indicators of Compromise
17 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | ff07641dc56914dd90ee0bd7404d7ad7 | Medium | Score 53/100 | First seen |
| MD5 | 676fabe30a28b53925fba98e34b35986 | Medium | Score 53/100 | First seen |
| MD5 | a28cba214058fcae2883d8cffc883abd | Medium | Score 53/100 | First seen |
| URL | https://www.ksog.org/insert_file/handle.php | High | Score 58/100 | First seen |
| URL | https://cubedesign.co.kr/mobile/fashion | High | Score 58/100 | First seen |
| MD5 | 2f8475a90a25624ed02f1d18d4e6d65d | Medium | Score 53/100 | First seen |
| URL | https://fp-news.co.kr/shop/cart | High | Score 58/100 | First seen |
| URL | https://pythonapischool.com/api/detach | High | Score 58/100 | First seen |
| MD5 | ec84d6cb2ae7974767aedac246b50a3e | Medium | Score 53/100 | First seen |
| MD5 | b4a7eff35f048f06fb0a2d7631f23a7d | Medium | Score 53/100 | First seen |
| MD5 | c105d6b16f544582772de0159f24c00a | Medium | Score 53/100 | First seen |
| URL | https://k-wbc.co.kr/skin/social/social_view.php | High | Score 58/100 | First seen |
| URL | https://cubedesign.co.kr/news | High | Score 58/100 | First seen |
| URL | https://javadevhouse.co.kr/ajax/libs/jquery/1.7.3/jquery.min.js | High | Score 58/100 | First seen |
| URL | https://rcsh.co.kr/modules/bbs/tiles/bbs_div/inputForm.php | High | Score 58/100 | First seen |
| URL | https://cubedesign.co.kr/news/economy/article/12345678 | High | Score 58/100 | First seen |
| URL | https://cubedesign.co.kr/news/AABBCC | High | Score 58/100 | First seen |
IOC Relationship Graph
17 total IOCs
MD5URL
scroll to zoom · drag to pan · click IOC to open