Essential information

Value / Name

kepw.org

Confidence

100/100

Revoked

Yes

Valid from

31/01/2023 18:28

Valid until

27/11/2023 18:28

Pattern type

stix

Published

20/12/2025 23:28

Modified

20/12/2025 23:28

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'kepw.org']

Labels / Tags

Labels: cobaltstrike fonelaunch gootkit gootloader malicious js obfuscation powershell registry manipulation snowcone unc2565

Marking (TLP)

TLP:CLEAR