Essential information

Value / Name

document-file.ru

Confidence

100/100

Revoked

Yes

Valid from

26/11/2025 15:09

Valid until

23/04/2026 16:04

Pattern type

stix

Published

20/12/2025 20:01

Modified

27/04/2026 16:32

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'document-file.ru']

Labels / Tags

Labels: apt authentication avemaria credential theft cve-2023-38831 cve-2024-43451 cve-2025-24054 cve-2025-24071 cve-2025-33073 exploits lateral movement ntlm phantomcore remcos rat vulnerabilities warzone windows

Marking (TLP)

TLP:CLEAR