Essential information

Value / Name

211.239.157.126

Confidence

100/100

Revoked

Yes

Valid from

13/05/2026 18:41

Valid until

06/06/2026 20:27

Pattern type

stix

Published

14/05/2026 10:41

Modified

15/06/2026 19:45

Author / Source

AlienVault

Description

No description.

Pattern

[ipv4-addr:value = '211.239.157.126']

Labels / Tags

Labels: anti-vm apt37 chinotto compiled python bytecode dead-drop-resolver deepfake impersonation environment variable obfuscation korean-targeting lnk file lnk-obfuscation narwhalrat pcloud python backdoor python-backdoor rokrat scheduled tasks persistence spear-phishing

Marking (TLP)

TLP:CLEAR