← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
DPRK's Playbook: HttpTroy and New BLINDINGCAN Variant
WHITE Kimsuky, Lazarus Tr1sa111 2025-11-05 Modified: 2025-12-03
17
IOCs
MEDIUM VOLUME
comebackerremote access toolespionageblindingcanhttptroyobfuscationbackdoorstealthdprk
MITRE ATT&CK & Malware Families
MALWARE FAMILIES
HttpTroy BLINDINGCAN - S0520 Comebacker
Indicators of Compromise (2 / 17 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 17ed62943568cb3ba5b858c26081a100 — 2025-11-05
FileHash-MD5 d28f74a6b2dd6301f2d30f46600f6bd6 — 2025-11-05
References (1)
↗ https://www.gendigital.com/blog/insights/research/dprk-kimsuky-lazarus-analysis