Essential information

Value / Name

ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909

Confidence

100/100

Revoked

Yes

Valid from

24/09/2024 15:20

Valid until

20/09/2025 23:14

Pattern type

stix

Published

20/12/2025 19:43

Modified

23/02/2026 10:49

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909']

Labels / Tags

Labels: anydesk apt atera atera agent bec bugsleep connectwise screenconnect credential stuffing darkbeatc2 edr espionage initial access intelligence gathering middle east muddyc2go muddywater phishing phonyc2 powermud powershell remote management tools rmm rust-based malware screenconnect spear-phishing spearphishing splashtop state-sponsored supply chain syncro

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.