Essential information

Value / Name

d2a0d5f564628773b6af7b9c11f6b86531a875bd2d186d7081ab62748a800ebb

Confidence

100/100

Revoked

No

Valid from

27/03/2026 19:59

Valid until

24/03/2027 03:53

Pattern type

stix

Published

27/03/2026 20:31

Modified

02/05/2026 19:06

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'd2a0d5f564628773b6af7b9c11f6b86531a875bd2d186d7081ab62748a800ebb']

Labels / Tags

Labels: ai infrastructure credential theft exfiltration kubernetes litellm msbuild.exe open source persistence pypi rat software security steganography supply chain supply chain attack sysmon.py

Marking (TLP)

TLP:CLEAR