Essential information

Value / Name

mail.beamofthemoon.com

Confidence

100/100

Revoked

Yes

Valid from

02/11/2024 02:03

Valid until

07/10/2025 11:45

Pattern type

stix

Published

20/12/2025 19:48

Modified

21/12/2025 15:33

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'mail.beamofthemoon.com']

Labels / Tags

Labels: av/edr bypass blacksuit byovd cobalt strike conti cortex xdr cybercrime forums data exfiltration encryption extortion mimikatz ransomware rclone rubeus safetykatz sharphound threat actor profiling

Marking (TLP)

TLP:CLEAR