Essential information

Value / Name

https://pweobmxdlboi.com/147.exe

Confidence

100/100

Revoked

Yes

Valid from

21/01/2025 12:52

Valid until

09/03/2025 12:52

Pattern type

stix

Published

21/12/2025 09:27

Modified

21/12/2025 09:27

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://pweobmxdlboi.com/147.exe']

Labels / Tags

Labels: apt central asia espionage golang government gservice.exe kyrgyzstan powershell resocks telegram xerox_scan17510875802718752175.exe yorotrooper

Marking (TLP)

TLP:CLEAR