Essential information

Value / Name

http://document-file.ru/files/documents/zakupki/MicrosoftWord.exe

Confidence

100/100

Revoked

Yes

Valid from

26/11/2025 15:09

Valid until

25/12/2025 20:52

Pattern type

stix

Published

20/12/2025 20:01

Modified

25/12/2025 20:52

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://document-file.ru/files/documents/zakupki/MicrosoftWord.exe']

Labels / Tags

Labels: apt authentication avemaria credential theft cve-2023-38831 cve-2024-43451 cve-2025-24054 cve-2025-24071 cve-2025-33073 exploits lateral movement ntlm phantomcore remcos rat vulnerabilities warzone windows

Marking (TLP)

TLP:CLEAR