Latrodectus – LunarSpider Lab

Correlate Splunk Sysmon logs and disk forensic artifacts across multiple hosts to reconstruct a multi-stage Latrodectus malware intrusion from initial access to data exfiltration.

Category:

Tactics:

Initial Access Execution Persistence Privilege Escalation Stealth Credential Access Discovery Lateral Movement Collection Command and Control Exfiltration

Tools:

Eric Zimmerman Tools DB Browser for SQLite Registry Explorer MFTECmd Timeline Explorer Splunk

hard

Walkthrough Available

5hrs

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!