[Intel]: https://blog.talosintelligence.com/lazarus-collectionrat/

[timb-machine]

Area

Malware reports

Parent threat

Command and Control

Finding

https://blog.talosintelligence.com/lazarus-collectionrat/

Industry reference

attack:T1573:Encrypted Channel
attack:T1071:Application Layer Protocol

Malware reference

DeimosC2
#751

Actor reference

HiddenCobra
Lazarus
APT38

Component

Linux

Scenario

No response