Essential information

Value / Name

w32.b8be9a5e0a-95.sbx.tg

Confidence

100/100

Revoked

No

Valid from

16/07/2026 23:04

Valid until

21/06/2027 07:47

Pattern type

stix

Published

17/07/2026 02:43

Modified

17/07/2026 02:45

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'w32.b8be9a5e0a-95.sbx.tg']

Labels / Tags

Labels: castlestealer clickfix cryptocurrency theft financial motivation remcos rat russian-speaking adversary starland rat trojanized installers uat-11795 wldr agent

Marking (TLP)

TLP:CLEAR