Essential information

Value / Name

htps://cdn.discordapp.com/attachments/1316109420995809283/1316112071376769165/NativeApp_G4QLIQRa.exe

Confidence

100/100

Revoked

Yes

Valid from

07/03/2025 11:19

Valid until

23/04/2025 12:19

Pattern type

stix

Published

21/12/2025 12:45

Modified

21/12/2025 12:45

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'htps://cdn.discordapp.com/attachments/1316109420995809283/1316112071376769165/NativeApp_G4QLIQRa.exe']

Labels / Tags

Labels: doenerium github information stealer living-off-the-land lumma lumma stealer malvertising multi-stage attack netsupport rat

Marking (TLP)

TLP:CLEAR