TF-MAL-elf.luna
📛 Threat Title
Malware family: Luna
Description
ThreatFox malware family `elf.luna`. Printable name: Luna.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
elf.luna
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/elf.luna
IOC database
- Type
- domain
- Value
elf.luna- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-elf.luna
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/elf.luna
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:malpedia.caad.fkie.fraunhofer.de
2023-01-13 ⋅ nikhilh-20 ⋅ Nikhil Hegde Getting Rusty and Stringy with Luna Ransomware Luna 2022-09-28 ⋅ vmware ⋅ Giovanni Vigna ESXi-Targeting Ransomware: The Threats That Are After Your Virtual Machines (Part 1) Avoslocker Babuk Black Basta BlackCat BlackMatter Conti DarkSide HelloKitty Hive LockBit Luna RansomEXX RedAlert Ransomware REvil
-
web:nikhilh-20.github.io
Capability Peculiarities Execution Peculiarities Summary References Family Introduction The Luna ransomware appeared in July 2022. Unlike its competitors, this threat targeted VMware ESXi instances from the day it started operating. Rust Strings In my experience as a malware analyst, I've been used to seeing ASCII and null-terminated strings ...
-
web:securelist.com
This report discusses new ransomware, that targets Windows, Linux and ESXi systems: Luna written in Rust and Black Basta.
-
web:unit42.paloaltonetworks.com
Unit 42 investigates Luna Moth/Silent Ransom Group callback phishing extortion campaign that targeted businesses in multiple sectors.
-
web:www.breachsense.com
Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.
-
web:www.cisa.gov
LummaC2 malware is able to infiltrate victim computer networks and exfiltrate sensitive information, threatening vulnerable individuals' and organizations' computer networks across multiple U.S. critical infrastructure sectors.
-
web:www.elastic.co
In this research publication, we'll explore the LUNA attack pattern — a cross-platform ransomware variant.
-
web:www.infosecinstitute.com
Luna is the perfect example, with the criminals' groups developing cross-platform ransomware families to cause the highest damage during the encryption process and target different operating systems. Rust and Goland are criminals' most popular programming languages to develop new threats.
-
web:www.kaspersky.com
We've already spotlighted the BlackCat gang, which distributes malware written in the cross-platform language Rust and is capable of encrypting such systems. Our experts analyzed two more malware families that recently appeared on the dark web with similar functionality: Black Basta and Luna . Black Basta — ransomware for ESXi
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.