Essential information

Value / Name

784564141.ccega6r0yph8.com

Confidence

100/100

Revoked

Yes

Valid from

27/05/2025 12:35

Valid until

01/05/2026 21:17

Pattern type

stix

Published

21/12/2025 14:27

Modified

01/05/2026 21:18

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = '784564141.ccega6r0yph8.com']

Labels / Tags

Labels: apt backdoor brute ratel bypassboss china-nexus cobalt strike custom tools cve-2017-9805 cve-2021-22205 cve-2024-27198 cve-2024-27199 cve-2024-51378 cve-2024-51567 cve-2024-56145 cve-2024-9047 cve-2025-31324 dll sideloading multi-industry targeting pulsepack sql injection vshell vulnerability exploitation

Marking (TLP)

TLP:CLEAR