CyberThreatIntel/North Korea/APT/Lazarus/23-10-19/analysis.md

The SideWinder campaign continue

Table of Contents

• Malware analysis
• Cyber kill chain
• Indicators Of Compromise (IOC)
• References MITRE ATT&CK Matrix
• Links
  • Original Tweet
  • Link Anyrun
  • External analysis

Malware analysis

Cyber kill chain

The process graphs resume all the cyber kill chains used by the attacker.

References MITRE ATT&CK Matrix

List of all the references with MITRE ATT&CK Matrix

Enterprise tactics	Technics used	Ref URL

Indicators Of Compromise (IOC)

List of all the Indicators Of Compromise (IOC)

Indicator	Description

This can be exported as JSON format Export in JSON

Links

Original tweet:

• https://twitter.com/RedDrip7/status/1186562944311517184

Links Anyrun:

• 6850189bbf5191a76761ab20f7c630ef.xls

External analysis:

• Analysis of Powershell malware of Lazarus group