src_e03c0eb81ecbe60444
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Not reported
- Retrieved
- Oct 08, 2026 03:48 UTC
Weaponizing a Lazarus Group Implant
The Lazarus group's latest implant/loader supports in-memory loading of 2nd-stage payloads. In this post we describe exactly how to repurposing this 1st-stage loader to execute *our* custom 'fileless' payloads!
Reference details
- Source category
- Research & news
- Report title
Weaponizing a Lazarus Group Implant- First reported
- Not reported
- Last reported
- Not reported
- Catalog updated
- Oct 08, 2026 03:48 UTC
- Record ID
91df1c9df410783dd282e9eb3c0dca381c74af190f79432b3e2edc39c4b0b4b5
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Review source update dates and status
- src_e03c0eb81ecbe60444Collection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.