216.73.217.80

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 23:21 · Modified 20/12/2025 23:21

Essential information

Value / Name
079c13fbc30a32e4f0386cd53c56d68404961b8f1cd4d4fde1a1e9def42aa557
Confidence
100/100
Revoked
Yes
Valid from
15/02/2023 17:51
Valid until
20/05/2024 18:51
Pattern type
stix
Published
20/12/2025 23:21
Modified
20/12/2025 23:21
Author / Source
AlienVault

Description

Win64:Trojan-gen SHA256 of 7b40aa57e1c61ecd6db2a1c18e08b0af SHA256 of 7b40aa57e1c61ecd6db2a1c18e08b0af

Pattern

[file:hashes.'SHA-256' = '079c13fbc30a32e4f0386cd53c56d68404961b8f1cd4d4fde1a1e9def42aa557']

Labels / Tags

Labels: aspxspy badpotato bitlocker china chopper cobaltstrike dalbit godzilla groupware mimikatz systemdrive webshell

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • Dalbit
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 ·