Essential information

Value / Name

e9a47aa1498d8c51ea069389d3083df85077134a65029f8a4ca8e30e210e02a7

Confidence

100/100

Revoked

Yes

Valid from

31/01/2023 18:28

Valid until

05/05/2024 19:28

Pattern type

stix

Published

20/12/2025 23:28

Modified

20/12/2025 23:28

Author / Source

AlienVault

Description

Pattern

[file:hashes.'SHA-256' = 'e9a47aa1498d8c51ea069389d3083df85077134a65029f8a4ca8e30e210e02a7']

Labels / Tags

Labels: cobaltstrike fonelaunch gootkit gootloader malicious js obfuscation powershell registry manipulation snowcone unc2565

Marking (TLP)

TLP:CLEAR