Essential information

Value / Name

ef2b6b411b79f751d73e824302ca00ff9f0d759a6eea02d2cfb11390d0e9379b

Confidence

100/100

Revoked

Yes

Valid from

29/12/2022 14:14

Valid until

02/04/2024 15:14

Pattern type

stix

Published

20/12/2025 19:37

Modified

20/12/2025 23:14

Author / Source

AlienVault

Description

Pattern

[file:hashes.'SHA-256' = 'ef2b6b411b79f751d73e824302ca00ff9f0d759a6eea02d2cfb11390d0e9379b']

Labels / Tags

Labels: china cobalt strike dll hijack phishing plugx poison ivy reddelta state-sponsored

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.