Essential information

Value / Name

ddcf66ecc61dc6b8cd36748d284d8cb45a470201b5373dd2bfc47700c7da32e1

Confidence

100/100

Revoked

No

Valid from

16/07/2026 13:34

Valid until

12/07/2027 21:27

Pattern type

stix

Published

17/07/2026 02:13

Modified

17/07/2026 02:13

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'ddcf66ecc61dc6b8cd36748d284d8cb45a470201b5373dd2bfc47700c7da32e1']

Labels / Tags

Labels: castlestealer clickfix credential harvesting cryptocurrency theft powershell implant python rat remcos rat starland rat trojanized installers wldr agent

Marking (TLP)

TLP:CLEAR