Essential information

Value / Name

http://172.86.114.149/seeddoc.exe

Confidence

100/100

Revoked

Yes

Valid from

03/04/2025 20:27

Valid until

20/05/2025 20:27

Pattern type

stix

Published

20/12/2025 19:55

Modified

21/12/2025 13:19

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://172.86.114.149/seeddoc.exe']

Labels / Tags

Labels: critical infrastructure cyber espionage file stealing government powershell ukraine vbscript wrecksteel

Marking (TLP)

TLP:CLEAR