Essential information

Value / Name

b156412c5ec872097c7abddecfce3ab0cc9c73541ac40f42fc3c3ddef6962138

Confidence

100/100

Revoked

Yes

Valid from

11/09/2023 16:42

Valid until

14/12/2024 15:42

Pattern type

stix

Published

20/12/2025 23:21

Modified

21/12/2025 01:22

Author / Source

AlienVault

Description

Pattern

[file:hashes.'SHA-256' = 'b156412c5ec872097c7abddecfce3ab0cc9c73541ac40f42fc3c3ddef6962138']

Labels / Tags

Labels: asec aspxspy badpotato bitlocker blueshell china chopper cobaltstrike dalbit dropper frpc godzilla groupware kimsuky lsass metasploit meterpreter mimikatz sbinrpcd sliver socks5 sparkrat systemdrive tmpkthread troy virustotal webshell

Marking (TLP)

TLP:CLEAR