Essential information

Value / Name

luckybear669.kozow.com

Confidence

100/100

Revoked

Yes

Valid from

21/07/2025 12:34

Valid until

25/06/2026 21:17

Pattern type

stix

Published

20/12/2025 19:57

Modified

25/06/2026 21:17

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'luckybear669.kozow.com']

Labels / Tags

Labels: antivirus exploitation apt backdoor deedrat dll side-loading dll sideloading netagent obfuscation persistence phishing

Marking (TLP)

TLP:CLEAR