Essential information

Value / Name

http://178.18.246.136:2078

Confidence

100/100

Revoked

Yes

Valid from

05/04/2024 11:38

Valid until

22/05/2024 11:38

Pattern type

stix

Published

21/12/2025 03:14

Modified

21/12/2025 04:02

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://178.18.246.136:2078']

Labels / Tags

Labels: backdoor cobalt strike code_injection cve-2021-44228 darkgate evasion injection loader malware modular obfuscation payload_distribution pikabot pinkslipbot qakbot qbot quackbot ransomware smb_shares

Marking (TLP)

TLP:CLEAR