Essential information

Value / Name

d52540621dec5ed56cac8532f0e4fe10a7575c3e17e984f59646909fa587dd35

Confidence

100/100

Revoked

No

Valid from

16/07/2026 13:34

Valid until

12/07/2027 21:27

Pattern type

stix

Published

17/07/2026 02:13

Modified

17/07/2026 02:13

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'd52540621dec5ed56cac8532f0e4fe10a7575c3e17e984f59646909fa587dd35']

Labels / Tags

Labels: castlestealer clickfix credential harvesting cryptocurrency theft powershell implant python rat remcos rat starland rat trojanized installers wldr agent

Marking (TLP)

TLP:CLEAR