Essential information

Value / Name

http://www.projectimprov.com/ir6g/

Confidence

100/100

Revoked

Yes

Valid from

14/02/2025 02:02

Valid until

02/04/2025 03:02

Pattern type

stix

Published

21/12/2025 09:36

Modified

21/12/2025 09:55

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://www.projectimprov.com/ir6g/']

Labels / Tags

Labels: api resolution base64 c2 server c2 traffic decoy c2 dword xor dwords encryption formbook information stealer ntdll hook evasion obfuscation process injection pushdo xloader

Marking (TLP)

TLP:CLEAR