Essential information

Value / Name

efa5b49bdd086125b2b7d4058d09566f1db5f183c2a6332c597322f85107667a

Confidence

100/100

Revoked

Yes

Valid from

27/09/2022 14:44

Valid until

31/12/2023 13:44

Pattern type

stix

Published

20/12/2025 22:01

Modified

20/12/2025 22:01

Author / Source

AlienVault

Description

Pattern

[file:hashes.'SHA-256' = 'efa5b49bdd086125b2b7d4058d09566f1db5f183c2a6332c597322f85107667a']

Labels / Tags

Labels: empire fancy bear graphite malware powerpoint file shell

Marking (TLP)

TLP:CLEAR