Search/Latrodectus
● Malware

Latrodectus

Latrodectus is a Windows malware downloader that has been used since at least 2023 to download and execute additional payloads and modules. Latrodectus has most often been distributed through email campaigns, primarily by TA577 and TA578, and has infrastructure overlaps with historic IcedID operations.

View graph Watch Export
Indicators tracked
5
View 5 indicators
Intelligence Reports30
30 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
57 relationships
T1053.005: Scheduled Task
source
T1021.005: VNC
source
T1047: Windows Management Instrumentation
source
T1033: System Owner/User Discovery
source
T1218.011: Rundll32
source
T1132.001: Standard Encoding
source
T1027.013: Encrypted/Encoded File
source
T1059.007: JavaScript
source
T1036.005: Match Legitimate Resource Name or Location
source
T1087.002: Domain Account
source
T1204.002: Malicious File
source
T1573.001: Symmetric Cryptography
source
T1497.001: System Checks
source
T1069.002: Domain Groups
source
T1566.002: Spearphishing Link
source
T1566.001: Spearphishing Attachment
source
T1559.001: Component Object Model
source
T1135: Network Share Discovery
source
T1082: System Information Discovery
source
T1218.007: Msiexec
source
T1106: Native API
source
T1005: Data from Local System
source
T1140: Deobfuscate/Decode Files or Information
source
T1027.001: Binary Padding
source
T1016: System Network Configuration Discovery
source
T1482: Domain Trust Discovery
source
T1083: File and Directory Discovery
source
T1102: Web Service
source
T1104: Multi-Stage Channels
source
T1057: Process Discovery
source
T1041: Exfiltration Over C2 Channel
source
T1547.001: Registry Run Keys / Startup Folder
source
T1518.001: Security Software Discovery
source
T1059.003: Windows Command Shell
source
T1070.004: File Deletion
source
T1027.002: Software Packing
source
T1071.001: Web Protocols
source
T1622: Debugger Evasion
source
T1105: Ingress Tool Transfer
source
T1027.007: Dynamic API Resolution
source
Loading 3 more…