Essential information

Value / Name

https://api.shw.kr/login_admin/member/login_fail.php

Confidence

100/100

Revoked

Yes

Valid from

27/10/2023 20:50

Valid until

13/12/2023 19:50

Pattern type

stix

Published

21/12/2025 01:29

Modified

21/12/2025 01:29

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://api.shw.kr/login_admin/member/login_fail.php']

Labels / Tags

Labels: backdoor c2 server credential dumper lazarus lpeclient signbt vulnerabilities and exploits

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.