Essential information

Value / Name

2528df60e55f210a6396dd7740d76afe30d5e9e8684a5b8a02a63bdcb5041bfc

Confidence

100/100

Revoked

No

Valid from

03/11/2025 11:15

Valid until

30/10/2026 19:09

Pattern type

stix

Published

20/12/2025 20:00

Modified

15/06/2026 20:16

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = '2528df60e55f210a6396dd7740d76afe30d5e9e8684a5b8a02a63bdcb5041bfc']

Labels / Tags

Labels: berserk stealer broomstick c2 communication clickfix code-signing cve-2023-36036 cve-2026-20131 dave endico fake captcha gootloader icenova inc initial access initial access broker interlock interlockrat junkfiction latrodectus mallard malvertising malware analysis microsoft trusted signing mintloader modelorat nodesnake ntlmthief oysterloader persistence plus keylogger

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.