Essential information

Value / Name

0661fc4eb09e99ba4d8e28a2d5fae6bb243f6acc0289870f9414f9328721010a

Confidence

100/100

Revoked

Yes

Valid from

22/12/2022 16:06

Valid until

26/03/2024 16:06

Pattern type

stix

Published

20/12/2025 19:37

Modified

20/12/2025 23:12

Author / Source

AlienVault

Description

Pattern

[file:hashes.'SHA-256' = '0661fc4eb09e99ba4d8e28a2d5fae6bb243f6acc0289870f9414f9328721010a']

Labels / Tags

Labels: cobalt strike ekipa excel add-in macro maldocs phishing remote access trojan russia social engineering ukraine xll files

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.