Essential information

Value / Name

89534f86ab5daaf55ce818872960eaa4eb64f4cc19118feea690638bf1156528

Confidence

100/100

Revoked

Yes

Valid from

03/04/2025 20:27

Valid until

31/03/2026 04:21

Pattern type

stix

Published

20/12/2025 19:55

Modified

31/03/2026 04:22

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = '89534f86ab5daaf55ce818872960eaa4eb64f4cc19118feea690638bf1156528']

Labels / Tags

Labels: critical infrastructure cyber espionage file stealing government powershell ukraine vbscript wrecksteel

Marking (TLP)

TLP:CLEAR