Essential information

Value / Name

c488127b3384322f636b2a213f6f7b5fdaa6545a27d550995dbf3f32e22424bf

Confidence

100/100

Revoked

Yes

Valid from

21/10/2023 00:17

Valid until

22/01/2025 23:17

Pattern type

stix

Published

21/12/2025 01:39

Modified

21/12/2025 01:39

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'c488127b3384322f636b2a213f6f7b5fdaa6545a27d550995dbf3f32e22424bf']

Labels / Tags

Labels: crambus exchange server mimikatz oilrig plink powerexchange powershell tokel

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.