Essential information

Value / Name

http://87.120.219.26/P9m4H7S2FqDTof'

Confidence

100/100

Revoked

Yes

Valid from

18/11/2025 23:17

Valid until

18/12/2025 05:00

Pattern type

stix

Published

20/12/2025 20:03

Modified

21/12/2025 20:39

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://87.120.219.26/P9m4H7S2FqDTof\'']

Labels / Tags

Labels: acr stealer amatera stealer c2 communication clickfix crypto-wallets evasion techniques information theft netsupport rat powershell

Marking (TLP)

TLP:CLEAR