Essential information

Value / Name

afcafe.kro.kr

Confidence

100/100

Revoked

Yes

Valid from

12/06/2025 00:07

Valid until

17/05/2026 08:49

Pattern type

stix

Published

21/12/2025 14:13

Modified

17/05/2026 08:50

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'afcafe.kro.kr']

Labels / Tags

Labels: appleseed apt babyshark dll file execution facebook flowerpower golddragon kimsuky kimsuky group linkedin powershell shell telegram username vmprotect

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.