Essential information

Value / Name

ec11fd865c2f502c47f100131f699a5e0589092e722a0820e96bd698364eefdb

Confidence

100/100

Revoked

No

Valid from

08/08/2025 19:08

Valid until

05/08/2026 03:02

Pattern type

stix

Published

21/12/2025 15:30

Modified

21/12/2025 15:32

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'ec11fd865c2f502c47f100131f699a5e0589092e722a0820e96bd698364eefdb']

Labels / Tags

Labels: amos atomic macos stealer backdoor command-and-control cryptocurrency data exfiltration macos persistent access russia-affiliated spear phishing spear-phishing

Marking (TLP)

TLP:CLEAR