Essential information

Value / Name

https://download.birdriver.org/download.php?id=425623

Confidence

100/100

Revoked

No

Valid from

29/05/2026 13:20

Valid until

27/06/2026 19:03

Pattern type

stix

Published

29/05/2026 14:41

Modified

07/06/2026 20:56

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://download.birdriver.org/download.php?id=425623']

Labels / Tags

Labels: calc.exe httpspy jsonping kimsuky loaddll.dll memloader rat social engineering south korea targeting spear phishing spyinster.dll spyloader.dll webex spoofing

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.