Pulse Detail — Threat Intelligence

PULSE NAME

Warning of North Korean cyber threats targeting the Defense Sector

WHITE LAZARUS AlienVault 2024-02-20 Modified: 2024-02-21

IOCs

MEDIUM VOLUME

Germany and South Korea’s intelligence agencies have issued a joint cyber security advisory, highlighting the threat posed by North Korean cyber actors to the German and Korean defence sectors. and the international community.

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1001 T1021 T1040 T1041 T1046 T1059 T1070 T1071 T1078 T1133 T1140 T1213 T1572 T1547 T1036 T1105 T1199 T1566 T1018 T1195

Indicators of Compromise (19)

All FileHash-MD5 FileHash-SHA1 domain hostname

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-MD5	3c2aa3687ac9f466ce909e2cb12b07a5	—	2024-02-20
FileHash-MD5	4631ef8db9c36b0f2534ac7193f2587e	—	2024-02-20
FileHash-MD5	607a2a8d2863c3144b8e901a16a76c33	—	2024-02-20
FileHash-SHA1	127ced578e041f53b5988a7fefaa6e09e64f4bf9	—	2024-02-20
FileHash-SHA1	294706ae0585abaf4e6c5e66a7f5141ac4281d57	—	2024-02-20
FileHash-SHA1	2e0d374f1e706ae1fa24558b54c5a1630302eab1	—	2024-02-20
FileHash-SHA1	3bc8acdd07c6d91652101d9c8b3326bee372a007	—	2024-02-20
FileHash-SHA1	7906270679014234b70aa63dd89e8282a945919c	—	2024-02-20
FileHash-SHA1	7b4d0d8e3bfcd634bc7d7a17fb546b7e8316a681	—	2024-02-20
FileHash-SHA1	7da62cdb447a7ae3ae7b5f67a511e7cf2b26c7df	—	2024-02-20
FileHash-SHA1	ac9021eb798de8323702a5aeb7c590f1ebaa3786	—	2024-02-20
FileHash-SHA1	d5c8edb84e4ff33aea8865676ffe801ff0a71701	—	2024-02-20
FileHash-SHA1	f3482a38befdcd7d0b87d86f24cdb209028bd847	—	2024-02-20
domain	chrysalisc.com	—	2024-02-20
domain	rginfotechnology.com	—	2024-02-20
domain	sifucanva.com	—	2024-02-20
domain	thefrostery.co.uk	—	2024-02-20
hostname	connection.lockscreen.kro.kr	—	2024-02-20
hostname	contact.rgssm.in	—	2024-02-20

References (1)

↗ https://www.verfassungsschutz.de/SharedDocs/publikationen/DE/cyberabwehr/2024-02-19-joint-cyber-security-advisory-englisch.pdf?__blob=publicationFile&v=2