Unit 42 published IOCs ↗
- Evidence class
- provider reported
- Source family label
- Not reported
- Source confidence
- Not reported
- Observed
- 2025-01-11 05:00 UTC
- Retrieved
- 2026-10-08 07:52 UTC
URL https://s.deemos.com/6ruXkfgh?&sherry=strange&octagon=fragile&initiative=rough&corsage
Indicator published by the cited source.
Reference details
- Source context
stix2-reports/report_json/2025-01-10-campaign-using-CVE-2017-0199-XLS-files.json- First reported
- 2025-01-11 05:00 UTC
- Last reported
- 2025-01-11 05:00 UTC
- Catalog updated
- 2026-10-08 07:52 UTC
Tags
Published indicators
Network addresses are displayed in defanged form.
URL
hxxps://s[.]deemos[.]com/6ruXkfgh?&sherry=strange&octagon=fragile&initiative=rough&corsage