Essential information

Value / Name

http://155.138.252.221/get.php

Confidence

100/100

Revoked

Yes

Valid from

19/09/2022 14:59

Valid until

05/11/2022 13:59

Pattern type

stix

Published

20/12/2025 19:34

Modified

20/12/2025 22:07

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://155.138.252.221/get.php']

Labels / Tags

Labels: exfil gamaredon geopolitical conflict giddome infostealer lnk files phishing powershell shuckworm vbs script

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.