Essential information

Value / Name

c1f278f88275e07cc03bd390fe1cbeedd55933110c6fd16de4187f4c4aaf42b9

Confidence

100/100

Revoked

No

Valid from

15/01/2026 16:21

Valid until

12/01/2027 00:14

Pattern type

stix

Published

15/01/2026 16:40

Modified

15/05/2026 21:14

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'c1f278f88275e07cc03bd390fe1cbeedd55933110c6fd16de4187f4c4aaf42b9']

Labels / Tags

Labels: amsi bypass c2 infrastructure diplomatic targeting espionage etw bypass evasion in-memory execution kazuar loader modular architecture nation-state peer-to-peer botnet pelmeni russia fsb stealth

Marking (TLP)

TLP:CLEAR