Essential information

Value / Name

decoraat.net

Confidence

100/100

Revoked

No

Valid from

01/03/2026 06:26

Valid until

27/07/2026 07:22

Pattern type

stix

Published

02/03/2026 12:42

Modified

07/04/2026 13:23

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'decoraat.net']

Labels / Tags

Labels: api hashing cloudflare turnstile dll side-loading g data antivirus korplug phishing plugx rat ta416 toneshell xor encryption

Marking (TLP)

TLP:CLEAR