Essential information

Value / Name

https://lorica.com.ua/MFA/вкладення.zip

Confidence

100/100

Revoked

Yes

Valid from

14/05/2025 10:26

Valid until

30/06/2025 10:26

Pattern type

stix

Published

21/12/2025 13:32

Modified

21/12/2025 13:32

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://lorica.com.ua/MFA/вкладення.zip']

Labels / Tags

Labels: chm files credential harvesting government targeting north korea phishing powershell reconnaissance ukraine

Marking (TLP)

TLP:CLEAR