Essential information

Value / Name

947fdef565d889d3d919d8d81014d718f2d22ef3ed0049c98960f7330f51f41f

Confidence

100/100

Revoked

Yes

Valid from

10/11/2022 23:55

Valid until

13/02/2024 23:55

Pattern type

stix

Published

20/12/2025 19:37

Modified

20/12/2025 22:53

Author / Source

AlienVault

Description

Pattern

[file:hashes.'SHA-256' = '947fdef565d889d3d919d8d81014d718f2d22ef3ed0049c98960f7330f51f41f']

Labels / Tags

Labels: apt41 avburner cobalt strike croxloader earth longhzhi malware mimikatz printnightmare printspoofer procburner

Marking (TLP)

TLP:CLEAR