Essential information

Value / Name

hacktool.msil.rubeus.sm

Confidence

100/100

Revoked

Yes

Valid from

25/01/2023 14:35

Valid until

09/05/2024 15:35

Pattern type

stix

Published

20/12/2025 23:14

Modified

20/12/2025 23:14

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'hacktool.msil.rubeus.sm']

Labels / Tags

Labels: colbalt strike hyper-v mimikatz raas vice society

Marking (TLP)

TLP:CLEAR