LunarMail
Software · ATTACK:enterprise:S1142
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1142",
"title": "LunarMail",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1142",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--a5789a26-2b7b-4b2d-a25f-31182468d4bb",
"external_id": "S1142",
"domain": "enterprise",
"created": "2024-06-26T20:21:21.137Z",
"modified": "2024-08-16T14:42:54.472Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "ESET Turla Lunar toolset May 2024",
"url": "https://www.welivesecurity.com/en/eset-research/moon-backdoors-lunar-landing-diplomatic-missions/"
}
]
}Explicit source assertions (18)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1114.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--02fad9c6-12fb-46d0-b307-877e9c80f4d0
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1070.008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--17d8f970-b482-405e-9c16-2d3a692d719f
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3199779f-80be-44fa-8f21-9623e8473381
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--38d896b7-6e7a-44e0-9b52-77da42dd59f6
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1204.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--510caea2-109f-4936-96e9-3e8125f39b27
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6da98663-ac0c-4ba4-b1dc-4b6fc925d5f2
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9c75cda8-5656-4968-8a74-738d1b2b0399
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1059.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9e07b49b-880b-4e8a-a95b-6f9cd07daa7f
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a4864c51-92f3-4f59-ba75-0a2b01aee2da
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b7d456ea-d533-4d29-b6d4-45586c4a124e
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1095
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b832110a-0610-4489-9729-a89064b8d61b
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1001.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bf50a79a-2df0-4da5-86bd-b534c5c09494
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1113
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c4f4e2ba-5ad8-4787-8d69-cc6720619ac9
ESET Turla Lunar toolset May 2024ATTACK:enterprise:G0010 → uses → ATTACK:enterprise:S1142
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c9999f59-6d9a-4f06-ba4f-df7590bcd366
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1543
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e33671e8-2a3c-4ec9-997f-c5275f5299d2
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1071.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f2828065-a45c-40ef-86ad-d13c05f648d5
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1137.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f8c0613b-557e-4a9d-9f01-d57138d18c24
ESET Turla Lunar toolset May 2024ATTACK:enterprise:S1142 → uses → ATTACK:enterprise:T1074.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fca5e5e4-e615-44d5-901e-225fccd329cc
ESET Turla Lunar toolset May 2024