← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Lazarus Group’s “Operation SyncHole” Targeting Critical Industries
WHITE cryptocti 2025-05-02 Modified: 2025-05-02
59
IOCs
HIGH VOLUME
As part of a series of articles on cyber-security, we take a look at some of the key quotes from people who have contributed to this year's £1.3bn ransomware attack.
updatesiemiocskeep antivirus endpointhttps
Indicators of Compromise (59)
All URL FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname
TYPEINDICATORDESCRIPTIONCREATED
URL http://www.erpmas.co.kr/Member/franchise_modify.asp — 2025-05-02
URL http://www.pgak.net/service/engine/release.asp — 2025-05-02
URL https://www.gncaf.or.kr/cafe/cafe_board.asp — 2025-05-02
URL https://www.hstudymall.co.kr/easypay/web/bottom.asp — 2025-05-02
URL https://www.zndance.com/shop/post.asp — 2025-05-02
FileHash-MD5 20183332c370b9d35d368083ecb74d22 MD5 of 3d311117d09f4a6ad300e471c2fb2b3c63344b1d 2025-05-02
FileHash-MD5 4a4662e73ab3a2c37e10dbe41e195041 MD5 of 3abfec6fc3445759730789d4322b0be73dc695c7 2025-05-02
FileHash-SHA1 2a2839f69ec1ba74853b11f8a8505f7086f1c07a — 2025-05-02
FileHash-SHA1 3abfec6fc3445759730789d4322b0be73dc695c7 — 2025-05-02
FileHash-SHA1 3d311117d09f4a6ad300e471c2fb2b3c63344b1d — 2025-05-02
FileHash-SHA1 5ce3cdfb61f3097e5974f5a07cf0bd2186585776 — 2025-05-02
FileHash-SHA1 8edb488b5f280490102241b56f1a8a71ebeef8e3 — 2025-05-02
FileHash-SHA1 9f7b4004018229fad8489b17f60aadb3281d6177 — 2025-05-02
FileHash-SHA1 aa374fa424cc31d2e5ec8ece2ba745c28cb4e1e8 — 2025-05-02
FileHash-SHA1 dc72d464289102caaf47ec318b6110ed6af7e5e4 — 2025-05-02
FileHash-SHA1 e50ad1a7a30a385a9d0a2c0a483d85d906ef4a9c — 2025-05-02
FileHash-SHA1 fac3fb1c20f2a56887bdba892e470700c76c81ba — 2025-05-02
FileHash-SHA256 91f6fdf97a9aab278ec63156a8deeca616abb968c81a14dc5713d9918f7eeb75 SHA256 of 3d311117d09f4a6ad300e471c2fb2b3c63344b1d 2025-05-02
FileHash-SHA256 fc8e3b582708394cf0d781a8ec50349a518245129c7e2606abc047402bad66f6 SHA256 of 3abfec6fc3445759730789d4322b0be73dc695c7 2025-05-02
URL http://bluekostec.com/eng/community/write.asp — 2025-05-02
URL http://www.cowp.or.kr/html/board/main.asp — 2025-05-02
URL http://www.fored.or.kr/home/board/view.php — 2025-05-02
URL http://www.gongsinet.kr/comm/comm_gongsi.asp — 2025-05-02
URL http://www.goojoo.net/board/banner01.asp — 2025-05-02
URL http://www.ikrea.or.kr/main/main_board.asp fd9e4b112b950d8c8221bf344e37a9c4a7a9159f42a19e75b0b440649e99ef79 2025-05-02
URL http://www.pcdesk.co.kr/Freeboard/mn_board.asp ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e8965d777fbf0 2025-05-02
URL http://www.shcpump.com/admin/form/skin/formBasic/style.php — 2025-05-02
URL http://www.style1.co.kr/main/view.asp — 2025-05-02
URL https://builsf.com/inc/left.php — 2025-05-02
URL https://htns.com/eng/skin/member/basic/skin.php — 2025-05-02
URL https://kadsm.org/skin/board/basic/write_comment_skin.php — 2025-05-02
URL https://thek-portal.com/eng/career/index.asp — 2025-05-02
URL https://www.hsbutton.co.kr/bbs/bbs_write.asp — 2025-05-02
URL https://www.quecue.kr/okproj/ex_join.asp — 2025-05-02
URL https://www.rsdf.kr/wp-content/uploads/2024/01/index.php — 2025-05-02
URL https://www.wowpress.co.kr/customer/refuse_05.asp — 2025-05-02
domain bluekostec.com — 2025-05-02
domain builsf.com — 2025-05-02
domain htns.com — 2025-05-02
domain kadsm.org — 2025-05-02
domain thek-portal.com — 2025-05-02
hostname www.cowp.or.kr — 2025-05-02
hostname www.erpmas.co.kr — 2025-05-02
hostname www.fored.or.kr — 2025-05-02
hostname www.gncaf.or.kr — 2025-05-02
hostname www.gongsinet.kr — 2025-05-02
hostname www.goojoo.net — 2025-05-02
hostname www.hsbutton.co.kr — 2025-05-02
hostname www.hstudymall.co.kr — 2025-05-02
hostname www.ikrea.or.kr — 2025-05-02
hostname www.pcdesk.co.kr — 2025-05-02
hostname www.pgak.net — 2025-05-02
hostname www.quecue.kr — 2025-05-02
hostname www.rsdf.kr — 2025-05-02
hostname www.shcpump.com — 2025-05-02
hostname www.smartmanagerex.com — 2025-05-02
hostname www.style1.co.kr — 2025-05-02
hostname www.wowpress.co.kr — 2025-05-02
hostname www.zndance.com — 2025-05-02