Essential information

Value / Name

rsat.activedirectory.ds-lds.tools

Confidence

100/100

Revoked

No

Valid from

29/06/2026 13:01

Valid until

03/06/2027 21:43

Pattern type

stix

Published

20/12/2025 19:39

Modified

30/06/2026 08:52

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'rsat.activedirectory.ds-lds.tools']

Labels / Tags

Labels: adfind appleseed byovd cobalt strike coolclient custom backdoor cve20201472 dlls encryption tactics gpo deployment icedid iso file lateral movement malspam mgbot network reconnaissance powercloud powershell psexec quantum ransomware ransomware-as-a-service reversesocks sharkloader vulnerable drivers zichatbot

Marking (TLP)

TLP:CLEAR