SubStation Alpha SSA/ASS Files

Mercuryceltic.7z (DELUXE)

The file mercuryceltic.7z is an encrypted archive containing specialized malware, reconnaissance tools, and lateral movement scripts associated with the North Korean threat actor group Lazarus Group. The campaign features custom backdoors, such as Dtrack or Prestige, and leverages Living-off-the-Land techniques to target global financial institutions and critical infrastructure.