2024-10-30 Lunar Spider's Latrodectus JS loader samples
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Rundll32 - T1218.011 Seo Poisoning - T1608.006 Software - T1592.002 Rundll32 - T1085
Show in Graph
Common Information
Type Value
UUID 2f3dea33-6cb5-4e0b-a3c6-688566eabafa
Fingerprint 34b4e1b0013e6ee2
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 12, 2024, 2:41 a.m.
Added to db Nov. 12, 2024, 3:58 a.m.
Last updated Nov. 12, 2024, 4:57 a.m.
Headline 2024-10-30 Lunar Spider's Latrodectus JS loader samples
Title 2024-10-30 Lunar Spider's Latrodectus JS loader samples
Detected Hints/Tags/Attributes 39/2/20
Source URLs
Redirection Url
Details Source https://malware.news/t/2024-10-30-lunar-spiders-latrodectus-js-loader-samples/88281
URL Provider
Details Provider Source level domain
Details malware.news malware.news
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 158 ✔ Malware Analysis, News and Indicators - Latest topics https://malware.news/latest.rss 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 6 
bazarunet.com
Details Domain 7 
tiguanin.com
Details Domain 6 
peronikilinfer.com
Details Domain 5 
jkbarmossen.com
Details Domain 36 
contagiodump.blogspot.com
Details Domain 19 
contagiominidump.blogspot.com
Details File 2 
document-16-32-50.js
Details File 4 
vierm_soft_x64.dll
Details File 6 
dsa.msi
Details sha256 5 
1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa
Details sha256 4 
28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc
Details sha256 3 
29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9
Details sha256 3 
c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7
Details sha256 4 
6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f
Details sha256 4 
937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913
Details sha256 4 
fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981
Details sha256 4 
ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991
Details IPv4 3 
173.255.204.62
Details IPv4 4 
45.14.244.124
Details Windows Registry Key 582 
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run