216.73.216.215

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:36 · Modified 20/12/2025 22:22

Essential information

Value / Name
http://setting.101888gg.com/jquery-3.3.1.min.js
Confidence
100/100
Revoked
Yes
Valid from
13/10/2022 20:51
Valid until
29/11/2022 19:51
Pattern type
stix
Published
20/12/2025 19:36
Modified
20/12/2025 22:22
Author / Source
AlienVault

Description

No description.

Pattern

[url:value = 'http://setting.101888gg.com/jquery-3.3.1.min.js']

Labels / Tags

Labels: backdoor budworm c2 servers credential dumper dll side-loading hyperbro log4j masquerading trojan viewfinity web shells

Marking (TLP)

TLP:CLEAR