Pulsedive Blog | Latrodectus Threat Research
Tags
cmtmf-attack-pattern: Masquerading
maec-delivery-vectors: Watering Hole
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Javascript - T1059.007 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Msiexec - T1218.007 Rundll32 - T1218.011 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Masquerading - T1036 Rundll32 - T1085 User Execution - T1204 Masquerading User Execution
Show in Graph
Common Information
Type Value
UUID 4e37d096-3140-4728-a4ac-8f3963a41f84
Fingerprint b43e4937af27c2c1
Analysis status DONE
Considered CTI value 0
Text language
Published June 4, 2024, midnight
Added to db Aug. 31, 2024, 1:19 a.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Latrodectus Loader
Title Pulsedive Blog | Latrodectus Threat Research
Detected Hints/Tags/Attributes 57/3/17
Source URLs
Redirection Url
Details Source https://blog.pulsedive.com/threat-research-latrodectus/
URL Provider
Details Provider Source level domain
Details pulsedive.com blog.pulsedive.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 47 ✔ Pulsedive Blog https://blog.pulsedive.com/rss/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 3 
aytobusesre.com
Details Domain 370 
www.proofpoint.com
Details Domain 101 
www.elastic.co
Details Domain 434 
medium.com
Details Domain 1 
cyberfraudcentre.com
Details File 269 
msiexec.exe
Details File 2 
bp.dat
Details File 1018 
rundll32.exe
Details File 748 
kernel32.dll
Details File 533 
ntdll.dll
Details File 291 
user32.dll
Details File 146 
wininet.dll
Details Url 3 
https://www.proofpoint.com/us/blog/threat-insight/latrodectus-spider-bytes-ice
Details Url 1 
https://www.elastic.co/security-labs/spring-cleaning-with-latrodectus
Details Url 3 
https://medium.com/walmartglobaltech/icedid-gets-loaded-af073b7b6d39
Details Url 1 
https://cyberfraudcentre.com/latrodectus-malware-a-new-threat-disguised-as-legitimate-services
Details Windows Registry Key 1 
HKCREbRm