indicatorurl
hxxps://6-1321729461[.]cos[.]ap-guangzhou[.]myqcloud[.]com/lnstaller.msi
- First seen
- 2026-05-14
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- Silver Fox: The Only Tax Audit Where the Fine Print Installs Malware
Cloud storage URL used to host the second-stage payload.