Essential information

Value / Name

slmgr.win

Confidence

100/100

Revoked

Yes

Valid from

21/10/2025 17:39

Valid until

18/03/2026 16:34

Pattern type

stix

Published

20/12/2025 20:00

Modified

18/03/2026 16:34

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'slmgr.win']

Labels / Tags

Labels: aurostealer powershell scheduled tasks self-compiling shellcode injection social engineering tiktok

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.