Essential information

Value / Name

micrsoft-teams-download.com

Confidence

100/100

Revoked

Yes

Valid from

16/09/2025 18:34

Valid until

11/02/2026 17:29

Pattern type

stix

Published

20/12/2025 19:45

Modified

11/02/2026 17:31

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'micrsoft-teams-download.com']

Labels / Tags

Labels: backdoor chrgetpdsi cleanuploader early detection execution extortion http post infrastructure json lnk file malicious malware microsoft teams multi-tiered oyster main persistence portstarter powershell python script ransomware rhysida schtasks seo poisoning temp directory

Marking (TLP)

TLP:CLEAR