Essential information

Value / Name

16bef09e16119f1754a6b4283e93ff7a17cfdd7c043c3ff05a3d41f128ead52e

Confidence

100/100

Revoked

Yes

Valid from

11/09/2023 16:42

Valid until

14/12/2024 15:42

Pattern type

stix

Published

20/12/2025 22:17

Modified

21/12/2025 01:22

Author / Source

AlienVault

Description

Pattern

[file:hashes.'SHA-256' = '16bef09e16119f1754a6b4283e93ff7a17cfdd7c043c3ff05a3d41f128ead52e']

Labels / Tags

Labels: asec aspxspy badpotato bitlocker blueshell china chopper cicada cobaltstrike dalbit dropper frpc godzilla groupware keylogger kimsuky lookback lsass metasploit meterpreter mimikatz sbinrpcd sliver socks5 sparkrat systemdrive tmpkthread troy virustotal webshell witchetty

Marking (TLP)

TLP:CLEAR