Essential information

Value / Name

retdirectyourman.eu

Confidence

100/100

Revoked

Yes

Valid from

16/09/2025 18:34

Valid until

11/02/2026 17:29

Pattern type

stix

Published

20/12/2025 19:44

Modified

11/02/2026 17:31

Author / Source

AlienVault

Description

Pattern

[domain-name:value = 'retdirectyourman.eu']

Labels / Tags

Labels: backdoor chrgetpdsi cleanuploader early detection edr execution extortion http post infrastructure json lnk file malicious malware microsoft teams multi-tiered oyster main persistence portstarter powershell python script ransomware rhysida schtasks seo poisoning shellcode temp directory

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.