Essential information

Value / Name

nauji.n-e.kr

Confidence

100/100

Revoked

Yes

Valid from

12/06/2025 00:07

Valid until

17/05/2026 08:49

Pattern type

stix

Published

21/12/2025 14:13

Modified

17/05/2026 08:50

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'nauji.n-e.kr']

Labels / Tags

Labels: appleseed apt babyshark decoy documents dll file execution facebook flowerpower golddragon kimsuky kimsuky group linkedin lnk files obfuscation powershell python scripts shell south korea spear phishing task scheduler telegram username vmprotect

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.