Essential information

Value / Name

http://91.202.233.215/config.txt

Confidence

100/100

Revoked

Yes

Valid from

13/01/2026 17:17

Valid until

11/02/2026 22:59

Pattern type

stix

Published

13/01/2026 17:31

Modified

11/02/2026 23:00

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://91.202.233.215/config.txt']

Labels / Tags

Labels: .net reactor in-memory execution living-off-the-land binaries msbuild abuse obfuscation powershell reflective loading remcos rat text-only staging vbs

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.