Essential information

Value / Name

http://ezQrvkFgEJWCTDNc.pNuiSCKMhwAgZvdyjrlBEFT.softwarE/111111?sub=d

Confidence

100/100

Revoked

Yes

Valid from

27/02/2026 10:54

Valid until

28/03/2026 16:37

Pattern type

stix

Published

27/02/2026 11:01

Modified

28/03/2026 16:37

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://ezQrvkFgEJWCTDNc.pNuiSCKMhwAgZvdyjrlBEFT.softwarE/111111?sub=d']

Labels / Tags

Labels: backdoor dll sideloading dns-over-https dohdoor edr bypass education healthcare united states

Marking (TLP)

TLP:CLEAR