Essential information

Value / Name

20d129d8ad727dc816fac7ab3dc4d3d3f3666220822de0d722db763fa138a246

Confidence

100/100

Revoked

Yes

Valid from

11/04/2023 15:04

Valid until

14/07/2024 15:04

Pattern type

stix

Published

20/12/2025 19:39

Modified

21/12/2025 00:26

Author / Source

AlienVault

Description

Pattern

[file:hashes.'SHA-256' = '20d129d8ad727dc816fac7ab3dc4d3d3f3666220822de0d722db763fa138a246']

Labels / Tags

Labels: cloudeye cobalt strike guloader phishing powershell rat rats remcos remcos rat vbs file zip archive

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.