Essential information

Value / Name

http://96.30.196.207:4177

Confidence

100/100

Revoked

Yes

Valid from

12/04/2022 09:19

Valid until

29/05/2022 09:19

Pattern type

stix

Published

20/12/2025 19:32

Modified

20/12/2025 19:40

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://96.30.196.207:4177']

Labels / Tags

Labels: backconnect cobalt strike emotet muldrop nsis proxy bot ryuk smokeloader systembc

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.