Essential information

Value / Name

f2bb03cd2570c2ba1f2f43b2dd70e484881b28bf0ad96306716f6455abef1a06

Confidence

100/100

Revoked

Yes

Valid from

22/02/2023 21:36

Valid until

27/05/2024 22:36

Pattern type

stix

Published

20/12/2025 23:21

Modified

20/12/2025 23:34

Author / Source

AlienVault

Description

Pattern

[file:hashes.'SHA-256' = 'f2bb03cd2570c2ba1f2f43b2dd70e484881b28bf0ad96306716f6455abef1a06']

Labels / Tags

Labels: apt37 hangul word processor javascript m2rat postscript powershell redeyes scarcruft steganography

Marking (TLP)

TLP:CLEAR