Essential information

Value / Name

mailattachmentimageurlxyz.site

Confidence

100/100

Revoked

Yes

Valid from

05/02/2025 17:10

Valid until

02/12/2025 17:10

Pattern type

stix

Published

20/12/2025 19:58

Modified

21/12/2025 15:48

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'mailattachmentimageurlxyz.site']

Labels / Tags

Labels: file-less hwp k messenger ole pcloud powershell rokrat spear-phishing

Marking (TLP)

TLP:CLEAR