Essential information

Value / Name

http://eshareflies.im/ad/

Confidence

100/100

Revoked

Yes

Valid from

10/04/2026 10:15

Valid until

09/05/2026 15:57

Pattern type

stix

Published

10/04/2026 12:07

Modified

09/05/2026 15:58

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://eshareflies.im/ad/']

Labels / Tags

Labels: com abuse in-memory execution peb manipulation powershell staging remote access tool screenconnect uac bypass vbscript loader

Marking (TLP)

TLP:CLEAR