PULSE NAME
Operation AppleJeus Sequel
WHITE Lazarus Group AlienVault 2020-01-08 Modified: 2020-02-07
40
IOCs
MEDIUM VOLUME
The Lazarus group is currently one of the most active and prolific APT actors. In 2018, Kaspersky published a report on one of their campaigns, named Operation AppleJeus. Notably, this operation marked the first time Lazarus had targeted macOS users, with the group inventing a fake company in order to deliver their manipulated application and exploit the high level of trust among potential victims.
MITRE ATT&CK & Malware Families
MALWARE FAMILIES
AppleJeus
Indicators of Compromise (40)
All FileHash-SHA256 domain URL hostname FileHash-MD5
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 07c38ca1e0370421f74c949507fc0d21f4cfcb5866a4f9c0751aefa0d6e97542 2020-01-08
domain aeroplans.info 2020-01-08
domain invesuccess.com 2020-01-08
domain unioncrypto.vip 2020-01-08
domain chainfun365.com 2020-01-08
domain mydealoman.com 2020-01-08
domain cyptian.com 2020-01-08
domain wfcwallet.com 2020-01-08
domain beastgoc.com 2020-01-08
URL https://www.wb-bot.org/certpkg.php 2020-01-08
URL http://beastgoc.com/grepmonux.php 2020-01-08
URL http://95.213.232.170/ProbActive/index.do 2020-01-08
URL https://unioncrypto.vip/update 2020-01-08
hostname www.jmttrading.org 2020-01-08
hostname www.buckfast-zucht.de 2020-01-08
hostname www.private-kurier.com 2020-01-08
hostname www.wb-invest.net 2020-01-08
hostname www.wb-bot.org 2020-01-08
FileHash-MD5 6588d262529dc372c400bef8478c2eec 2020-01-08
FileHash-MD5 bb66ab2db0bad88ac6b829085164cbbb 2020-01-08
FileHash-MD5 e1953fa319cc11c2f003ad0542bca822 2020-01-08
FileHash-MD5 b63e8d4277b190e2e3f5236f07f89eee 2020-01-08
FileHash-MD5 da17802bc8d3eca26b7752e93f33034b 2020-01-08
FileHash-MD5 39cdf04be2ed479e0b4489ff37f95bbe 2020-01-08
FileHash-MD5 629b9de3e4b84b4a0aa605a3e9471b31 2020-01-08
FileHash-MD5 cb56955b70c87767dee81e23503086c3 2020-01-08
FileHash-MD5 f221349437f2f6707ecb2a75c3f39145 2020-01-08
FileHash-MD5 f051a18f79736799ac66f4ef7b28594b 2020-01-08
FileHash-MD5 e35b15b2c8bb9eda8bc4021accf7038d 2020-01-08
FileHash-MD5 bb04d77bda3ae9c9c3b6347f7aef19ac 2020-01-08
FileHash-MD5 24b3614d5c5e53e40b42b4e057001770 2020-01-08
FileHash-MD5 55ec67fa6572e65eae822c0b90dc8216 2020-01-08
FileHash-MD5 c2ffbf7f2f98c73b98198b4937119a18 2020-01-08
FileHash-MD5 a9e960948fdac81579d3b752e49aceda 2020-01-08
FileHash-MD5 3efeccfc6daf0bf99dcb36f247364052 2020-01-08
FileHash-MD5 8b4c532f10603a8e199aa4281384764e 2020-01-08
FileHash-MD5 be37637d8f6c1fbe7f3ffc702afdfe1d 2020-01-08
FileHash-MD5 267a64ed23336b4a3315550c74803611 2020-01-08
FileHash-MD5 055829e7600dbdae9f381f83f8e4ff36 2020-01-08
FileHash-MD5 6058368894f25b7bc8dd53d3a82d9146 2020-01-08