Essential information

Value / Name

user.kangaroosim.com

Confidence

100/100

Revoked

No

Valid from

30/01/2026 09:23

Valid until

04/01/2027 18:06

Pattern type

stix

Published

30/01/2026 09:49

Modified

27/06/2026 17:26

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'user.kangaroosim.com']

Labels / Tags

Labels: data exfiltration education sector hotta killer interlockrat lateral movement mintloader nodesnakerat persistence ransomware zero-day

Marking (TLP)

TLP:CLEAR