Essential information

Value / Name

http://94.131.113.79/splhost.exe

Confidence

100/100

Revoked

Yes

Valid from

02/09/2024 22:52

Valid until

19/10/2024 22:52

Pattern type

stix

Published

21/12/2025 06:47

Modified

21/12/2025 06:47

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://94.131.113.79/splhost.exe']

Labels / Tags

Labels: babuk babyk belarus cve-2023-38831 hacktivists lockbit phantomcore phantomdl phishing ransomware russia vasa locker

Marking (TLP)

TLP:CLEAR