Essential information

Value / Name

http://aerobickarlaurbanovas.top/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest=

Confidence

100/100

Revoked

Yes

Valid from

19/02/2026 12:10

Valid until

20/03/2026 17:53

Pattern type

stix

Published

19/02/2026 13:44

Modified

20/03/2026 17:53

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://aerobickarlaurbanovas.top/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest=']

Labels / Tags

Labels: c2 infrastructure cybercrime digital signatures docconnect email campaigns malware-as-a-service remote access trojan rmm abuse trustconnect trustconnect rat

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.