Essential information

Value / Name

dfhg72lymw7s3d7b.onion

Confidence

100/100

Revoked

Yes

Valid from

12/04/2022 09:19

Valid until

06/02/2023 08:19

Pattern type

stix

Published

20/12/2025 19:32

Modified

20/12/2025 19:40

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'dfhg72lymw7s3d7b.onion']

Labels / Tags

Labels: backconnect cobalt strike emotet muldrop nsis proxy bot ryuk smokeloader systembc

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.