DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

라자루스 그룹 DLL Side-Loading 기법 이용 (mi.dll)

Date (as written)
2022-10-06
Year
2022
Actors (as written)
라자루스
Actor pages
라자루스
Tags (as written)
ASEC post; language=ko

Source entries (3)

AhnLab ASEC blog (asec.ahnlab.com)

Lazarus Group Uses the DLL Side-Loading Technique (mi.dll) · 2022-10-06
excerpt: While tracking the Lazarus attack group, the ASEC analysis team discovered that the attackers were using the DLL Side-Loading attack technique (T1574.002) by abusing legitimate applications in the initial compromise stage to achieve the next stage of their attack process. https://attack.mitre.org/techniques/T1574/002/ The DLL Side-Loading attack technique saves a legitimate application and a mal | attribution sentence: While tracking the Lazarus attack group, the ASEC analysis team discovered that the attackers were using the DLL Side-Loading attack technique (T1574.002) by abusing legitimate applications in the initial compromise stage to achieve the next stage of their attack process.
https://asec.ahnlab.com/en/39828/

AhnLab ASEC blog (asec.ahnlab.com)

라자루스 그룹 DLL Side-Loading 기법 이용 (mi.dll) · 2022-10-06
excerpt: ASEC 분석팀은 라자루스 공격 그룹을 추적하던 중 공격자가 초기 침투 단계에서 다음 공격 단계 달성을 위해 정상 응용 프로그램을 이용한 DLL Side-Loading 공격 기법(T1574.002)을 사용하는 정황을 포착했다. Hijack Execution Flow: DLL Side-Loading, Sub-technique T1574.002 – Enterprise | MITRE ATT&CK® APT19 launched an HTTP malware variant and a Port 22 malware variant using a legitimate executable […] | attribution sentence: ASEC 분석팀은 라자루스 공격 그룹을 추적하던 중 공격자가 초기 침투 단계에서 다음 공격 단계 달성을 위해 정상 응용 프로그램을 이용한 DLL Side-Loading 공격 기법(T1574.002)을 사용하는 정황을 포착했다.
https://asec.ahnlab.com/ko/39648/

UN Panel of Experts S/2023/171

Lazarus Group Uses the DLL Side-Loading Technique (mi.dll) (Lazarus) · 12 October 2022
Annex 77 (Links to reports from Ahnlab’s ASEC), listed under “Lazarus Group”: “Lazarus Group Uses the DLL Side-Loading Technique (mi.dll) (Lazarus)” (12 October 2022)
https://undocs.org/S/2023/171

Suggest a correction on GitHub