Essential information

Value / Name

event.process.parent.name

Confidence

100/100

Revoked

No

Valid from

19/06/2026 02:03

Valid until

24/05/2027 10:45

Pattern type

stix

Published

19/06/2026 10:39

Modified

19/06/2026 10:39

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'event.process.parent.name']

Labels / Tags

Labels: browser hijacking c2-conditional payload certificate rotation dart obfuscation flutter framework abuse fluttershell macos backdoor operation flutterbridge

Marking (TLP)

TLP:CLEAR