Essential information

Value / Name

638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2

Confidence

100/100

Revoked

Yes

Valid from

24/09/2024 15:20

Valid until

20/09/2025 23:14

Pattern type

stix

Published

20/12/2025 19:43

Modified

23/02/2026 10:49

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = '638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2']

Labels / Tags

Labels: anydesk apt atera atera agent bec connectwise screenconnect credential stuffing darkbeatc2 edr initial access intelligence gathering middle east muddyc2go muddywater phishing phonyc2 powermud powershell remote management tools rmm rust-based malware screenconnect spear-phishing spearphishing splashtop state-sponsored supply chain syncro teamviewer zendesk chat

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.