216.73.217.22

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 01:15 · Modified 21/12/2025 01:15

Essential information

Value / Name
57492d33b7c0755bb411b22d2dfdfdf088cbbfcd010e30dd8d425d5fe66adff4
Confidence
100/100
Revoked
Yes
Valid from
28/08/2023 15:21
Valid until
30/11/2024 14:21
Pattern type
stix
Published
21/12/2025 01:15
Modified
21/12/2025 01:15
Author / Source
AlienVault

Description

ConventionEngine_Anomaly_MultiPDB_Double SHA256 of b97761358338e640a31eef5e5c5773b633890914

Pattern

[file:hashes.'SHA-256' = '57492d33b7c0755bb411b22d2dfdfdf088cbbfcd010e30dd8d425d5fe66adff4']

Labels / Tags

Labels: adfind cobalt strike icedid nokoyawa ta551

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • TA551 GOLD CABINShathak
    The MITRE Corporation Confidence 100

    [TA551](https://attack.mitre.org/groups/G0127) is a financially-motivated threat group that has been active since at least 2018. (Citation: Secureworks GOLD CABIN) The group has primarily targeted English, German, Italian, and Japanese …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 27/03/2026 01:14