216.73.216.6

Indicator (IOC)

stix AlienVault · Published 14/04/2026 11:52 · Modified 20/05/2026 09:02

Essential information

Value / Name
8448b5ff7fac8b65dd9e5056a8a4b3e4230b7b602f46e24f1667821a64a90e6e
Confidence
100/100
Revoked
No
Valid from
14/04/2026 10:55
Valid until
10/04/2027 18:48
Pattern type
stix
Published
14/04/2026 11:52
Modified
20/05/2026 09:02
Author / Source
AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = '8448b5ff7fac8b65dd9e5056a8a4b3e4230b7b602f46e24f1667821a64a90e6e']

Labels / Tags

Labels: apt37 facebook reconnaissance installer tampering north korea pretexting process hollowing rokrat shellcode injection social engineering zoho workdrive c2

Marking (TLP)

TLP:CLEAR