MITRE ATT&CKsoftware (malware)

S1143 LunarLoader

Published 2024-06-27 Modified 2024-06-27 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-06-27

Description

LunarLoader is the loader component for the LunarWeb and LunarMail backdoors that has been used by Turla since at least 2020 including against a European ministry of foreign affairs (MFA). LunarLoader has been observed as a standalone and as a part of trojanized open-source software such as AdmPwd.

Related

Uses · MITRE ATT&CK (5)

  • T1620 Reflective Code Loading technique
  • T1137.006 Add-ins sub-technique
  • T1480 Execution Guardrails technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1016 System Network Configuration Discovery technique

Referenced by MITRE ATT&CK · uses (1)

References