Essential information

Value / Name

92bb4ddb98eeaf11fc15bb32e71d0a63256a0ed826a03ba293ce3a8bf057a514

Confidence

100/100

Revoked

No

Valid from

22/07/2025 00:45

Valid until

18/07/2026 08:39

Pattern type

stix

Published

21/12/2025 15:46

Modified

21/12/2025 16:06

Author / Source

AlienVault

Description

Pattern

[file:hashes.'SHA-256' = '92bb4ddb98eeaf11fc15bb32e71d0a63256a0ed826a03ba293ce3a8bf057a514']

Labels / Tags

Labels: apt authentication bypass backdoor china-aligned chinese threat actors cryptographic keys cve cve-2025-49704 cve-2025-49706 cve-2025-53770 cve-2025-53771 cybersecurity deserialization education exploit chain exploitation government healthcare in-memory payload microsoft sharepoint msil/webshell.js on-premises patch rce remote code execution sharepoint spoofing threat detection toolshell unauthenticated attacks

Marking (TLP)

TLP:CLEAR