LunarLoader
Software · ATTACK:enterprise:S1143
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1143",
"title": "LunarLoader",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1143",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--6490afef-d88e-4e2b-b9d9-a472508ca59d",
"external_id": "S1143",
"domain": "enterprise",
"created": "2024-06-27T19:07:21.574Z",
"modified": "2024-06-27T20:01:04.973Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "ESET Turla Lunar toolset May 2024",
"url": "https://www.welivesecurity.com/en/eset-research/moon-backdoors-lunar-landing-diplomatic-missions/"
}
]
}Explicit source assertions (6)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1143 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2b31cfdc-efab-421a-bc37-ea9eaa156fc8
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1143 → uses → ATTACK:enterprise:T1480
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--79a92839-53b3-4ff2-90f4-8f9630b2da93
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1143 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7ae8b9cf-2524-4861-8246-394a96339f49
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1143 → uses → ATTACK:enterprise:T1137.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f6bb4feb-bef7-4d0d-ae26-30b2500a2cd4
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1143 → uses → ATTACK:enterprise:T1620
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fd7d0ecd-7d16-424f-8d5c-9af1604290fa
ESET Turla Lunar toolset May 2024ATTACK:enterprise:G0010 → uses → ATTACK:enterprise:S1143
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ff1ca662-7030-4d24-bf0f-28e8dde7fc65
ESET Turla Lunar toolset May 2024