Essential information

Value / Name

https://x0.at/qOfN.msi

Confidence

100/100

Revoked

Yes

Valid from

10/04/2026 10:15

Valid until

09/05/2026 15:57

Pattern type

stix

Published

10/04/2026 12:07

Modified

09/05/2026 15:58

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://x0.at/qOfN.msi']

Labels / Tags

Labels: com abuse in-memory execution peb manipulation powershell staging remote access tool screenconnect uac bypass vbscript loader

Marking (TLP)

TLP:CLEAR