Essential information

Value / Name

ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0

Confidence

100/100

Revoked

Yes

Valid from

24/09/2024 15:20

Valid until

20/09/2025 23:14

Pattern type

stix

Published

20/12/2025 19:43

Modified

23/02/2026 10:49

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0']

Labels / Tags

Labels: anydesk apt atera atera agent bec connectwise screenconnect credential stuffing darkbeatc2 edr initial access intelligence gathering middle east muddyc2go muddywater phishing phonyc2 powermud powershell remote management tools rmm rust-based malware screenconnect spear-phishing spearphishing splashtop state-sponsored supply chain syncro teamviewer zendesk chat

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.