Essential information

Value / Name

eaa9dc1c9dc8620549fee54d81399488292349d2c8767b58b7d0396564fb43e7

Confidence

100/100

Revoked

No

Valid from

09/12/2025 18:09

Valid until

06/12/2026 02:03

Pattern type

stix

Published

21/12/2025 19:51

Modified

22/04/2026 17:30

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'eaa9dc1c9dc8620549fee54d81399488292349d2c8767b58b7d0396564fb43e7']

Labels / Tags

Labels: amsi-bypass azure-trusted-signing cmstplua-uac-bypass credential dumping cryptor-as-a-service cve-2016-0099 cve-2017-0213 cve-2018-8639 cve-2019-1388 cve-2020-0787 cve-2020-0796 cve-2020-1066 cve-2021-41379 cve-2022-24521 cve-2025-7771 dll-sideloading etw-patching fudcrypt guloader lazagne makop network scanning privilege escalation ransomware rdp exploitation screenconnect

Marking (TLP)

TLP:CLEAR