Essential information

Value / Name

http://ffgfgjjddsgtrddhtjyfdsessxdssdfdfdfghfhg.duckdns.org:14647

Confidence

100/100

Revoked

No

Valid from

03/07/2026 04:26

Valid until

01/08/2026 10:09

Pattern type

stix

Published

03/07/2026 08:53

Modified

03/07/2026 08:53

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://ffgfgjjddsgtrddhtjyfdsessxdssdfdfdfghfhg.duckdns.org:14647']

Labels / Tags

Labels: asyncrat cloudflare workers formbook hta payload lumma multi-stage infection phishing campaign remcos spreadsheet dropper steganography url shorteners vba macros

Marking (TLP)

TLP:CLEAR