>samit_hota
Back to IOCs
G103737 indicators

Latrodectus — Indicators of Compromise

Samit Hota·
#ioc#latrodectus

Overview

Indicators of compromise associated with Latrodectus. 37 indicators listed below, linked to the G1037 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
domaingitenter.digitalJuly 21, 202675%
domainmaialimentosreales.comJuly 15, 2026100%
domainngb.roJuly 15, 2026100%
domainnwachambersfamily.comJuly 15, 2026100%
domainpcl.hamburgJuly 15, 2026100%
domainpetx.vetJuly 15, 2026100%
domainplumbinggurus.comJuly 15, 2026100%
domainquaideazamcollege.comJuly 15, 2026100%
domainracingoperations.com.auJuly 15, 2026100%
domainracquetclubofgastonia.comJuly 15, 2026100%
domainsarahcole.com.auJuly 15, 2026100%
domainsealaunchservices.comJuly 15, 2026100%
domainsoftsystems.proJuly 15, 2026100%
domainstudio-minx.comJuly 15, 2026100%
domainsurf7seas.comJuly 15, 2026100%
domaintanahabangmini.netJuly 15, 2026100%
domainthebookoninvesting.comJuly 15, 2026100%
domaintscd.vnJuly 15, 2026100%
domainvin2.roJuly 15, 2026100%
domainwaltonsoftware.comJuly 15, 2026100%
domainzeribsglobal.comJuly 15, 2026100%
domainfocusspo.comJuly 15, 2026100%
domainmarebnb.comJuly 15, 2026100%
domainpyebrook.comJuly 15, 2026100%
domainsamarkegypt.comJuly 15, 2026100%
domaincaramdistribuciones.com.arJuly 15, 2026100%
domaincmla.blogJuly 15, 2026100%
domaincursohenfil.com.brJuly 15, 2026100%
domaincydesys.comJuly 15, 2026100%
domaindokonalebydleni.czJuly 15, 2026100%
domainatlantadumpsterrentalhq.comJuly 15, 2026100%
domainbaumas.noJuly 15, 2026100%
domainbringlearngrow.comJuly 15, 2026100%
domainartsunfold.comJuly 15, 2026100%
urlhttps://catholicsma.com/wp-content/uploads/2024/07/main.jsJuly 15, 202650%
domainalianzaamericanaseguros.comJuly 15, 2026100%
urlhttps://asioklaydpory.com/h4r2.htmlJuly 15, 2026100%

Related content

Adversary Profile

TA577: Adaptive Initial Access Broker Evolving to Post-Exploitation

Adversary Profile

TA578: A Persistent Initial Access Broker Evolving with New Loaders

IOCs

5.t Downloader — Indicators of Compromise

IOCs

ACR Stealer — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call