Essential information

Value / Name

https://ekb.tanzedrom.ru/secure-document/t.php?t=67b81a557d8dbe296942c0efdc0030f01f03933b9ea815975089e1f8c06db9c521f7ef9b70ad25db8f8483cbbb2fb813&action=show_document&z=OPRFTHRD&x=5000

Confidence

100/100

Revoked

Yes

Valid from

22/12/2022 16:06

Valid until

07/02/2023 16:06

Pattern type

stix

Published

20/12/2025 19:37

Modified

20/12/2025 23:12

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://ekb.tanzedrom.ru/secure-document/t.php?t=67b81a557d8dbe296942c0efdc0030f01f03933b9ea815975089e1f8c06db9c521f7ef9b70ad25db8f8483cbbb2fb813&action=show_document&z=OPRFTHRD&x=5000']

Labels / Tags

Labels: cobalt strike ekipa excel add-in macro maldocs phishing remote access trojan russia social engineering ukraine xll files

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.