Essential information

Value / Name

gtldgtld.store

Confidence

100/100

Revoked

Yes

Valid from

18/03/2024 11:33

Valid until

12/01/2025 11:33

Pattern type

stix

Published

21/12/2025 03:45

Modified

21/12/2025 03:45

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'gtldgtld.store']

Labels / Tags

Labels: apt backdoor cobalt strike coreshell cve-2022-21587 cve-2023-32315 destroyrat kaba korplug plugx shadowpad sofacy spear phishing thoper xdealer

Marking (TLP)

TLP:CLEAR