Essential information

Value / Name

f9dd0b57a5c133ca0c4cab3cca1ac8debdc4a798b452167a1e5af78653af00c1

Confidence

100/100

Revoked

No

Valid from

22/10/2025 21:02

Valid until

19/10/2026 04:56

Pattern type

stix

Published

21/12/2025 17:42

Modified

21/12/2025 20:32

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'f9dd0b57a5c133ca0c4cab3cca1ac8debdc4a798b452167a1e5af78653af00c1']

Labels / Tags

Labels: asp .net chinese threat actor cryptocurrency espionage finaldraft government targets hijackdrivermanager hijackserver iis iis exploitation relay network remote command execution rootkit seo shadowpad stealthy operations wingtbcli

Marking (TLP)

TLP:CLEAR