Essential information

Value / Name

eb2564a6f22dcec73dda3b6e4dc5fd37a4fa017f6b98b6dea5ac5b23a44b1f57

Confidence

100/100

Revoked

Yes

Valid from

21/10/2022 08:32

Valid until

24/01/2024 07:32

Pattern type

stix

Published

20/12/2025 19:36

Modified

20/12/2025 22:26

Author / Source

AlienVault

Description

Pattern

[file:hashes.'SHA-256' = 'eb2564a6f22dcec73dda3b6e4dc5fd37a4fa017f6b98b6dea5ac5b23a44b1f57']

Labels / Tags

Labels: dll side-loading gozi malicious word document phishing ransomware rm3 variant sandbox evasion steganography ursnif

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.