Essential information

Value / Name

cfd0d56ca3d6c9ca232252570522c4b904be2807c461276979b1f8c551ccd4aa

Confidence

100/100

Revoked

Yes

Valid from

19/03/2025 10:30

Valid until

15/03/2026 18:23

Pattern type

stix

Published

20/12/2025 19:54

Modified

15/03/2026 18:25

Author / Source

AlienVault

Description

Pattern

[file:hashes.'SHA-256' = 'cfd0d56ca3d6c9ca232252570522c4b904be2807c461276979b1f8c551ccd4aa']

Labels / Tags

Labels: apt c# loader command execution data theft eastern europe espionage etdownloader government infrastructure analysis lnk lnk exploitation obfuscation phishing raspberry robin shortcut vulnerability windows xdigo zero-day

Marking (TLP)

TLP:CLEAR