Essential information

Value / Name

9ffb61f1360595fc707053620f3751cb76c83e67835a915ccd3cbff13cf97bed

Confidence

100/100

Revoked

No

Valid from

23/07/2025 17:42

Valid until

20/07/2026 01:36

Pattern type

stix

Published

21/12/2025 06:28

Modified

21/12/2025 15:50

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = '9ffb61f1360595fc707053620f3751cb76c83e67835a915ccd3cbff13cf97bed']

Labels / Tags

Labels: backdoors dll sideloading espionage figlio.exe ghost rat infostealers multi-stage attack olmapi32.dll orpcbackdoor payloads persistence phantomnet schs.exe scm.exe searchapp.jpg social engineering sparrow.jpg sstn.exe stom.jpg tibetan community web compromise

Marking (TLP)

TLP:CLEAR