Essential information

Value / Name

https://asq.r77vh0.pw/win/hssl/r7.hta

Confidence

100/100

Revoked

Yes

Valid from

06/12/2023 14:44

Valid until

22/01/2024 14:44

Pattern type

stix

Published

20/12/2025 19:41

Modified

21/12/2025 02:09

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://asq.r77vh0.pw/win/hssl/r7.hta']

Labels / Tags

Labels: bianlian cobalt strike comspec conti daphne empire et info havoc m2 et metasploit mssql server powershell shell sliver smbexec sql server tor2mine xpcmdshell

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.