Essential information

Value / Name

http://japanroom.com/board/DATA/1288247428101.jpg

Confidence

100/100

Revoked

Yes

Valid from

14/04/2026 10:55

Valid until

13/05/2026 16:37

Pattern type

stix

Published

14/04/2026 11:52

Modified

13/05/2026 16:39

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://japanroom.com/board/DATA/1288247428101.jpg']

Labels / Tags

Labels: apt37 facebook reconnaissance installer tampering north korea pretexting process hollowing rokrat shellcode injection social engineering zoho workdrive c2

Marking (TLP)

TLP:CLEAR