Essential information

Value / Name

https://signindat.com/update.exe

Confidence

100/100

Revoked

No

Valid from

07/07/2026 16:14

Valid until

05/08/2026 21:57

Pattern type

stix

Published

07/07/2026 16:46

Modified

07/07/2026 16:46

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://signindat.com/update.exe']

Labels / Tags

Labels: amsi bypass browser hijacking credential theft crysome rat living-off-the-land spear-phishing uac bypass windefctl

Marking (TLP)

TLP:CLEAR