Essential information

Value / Name

lc3w.telemetry.geostatcdn.com

Confidence

100/100

Revoked

Yes

Valid from

05/12/2023 15:25

Valid until

19/03/2025 15:25

Pattern type

stix

Published

20/12/2025 19:41

Modified

21/12/2025 01:46

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'lc3w.telemetry.geostatcdn.com']

Labels / Tags

Labels: agent racoon c2 server dll module helper script mimikatz module ntospy powershell

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.