216.73.216.6

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 21:26 · Modified 20/12/2025 21:26

Essential information

Value / Name
5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b
Confidence
100/100
Revoked
Yes
Valid from
27/06/2022 14:46
Valid until
30/09/2023 14:46
Pattern type
stix
Published
20/12/2025 21:26
Modified
20/12/2025 21:26
Author / Source
AlienVault

Description

Win64:RansomX-gen\ [Ransom] SHA256 of 160320b920a5ef22ac17b48146152ffbef60461f

Pattern

[file:hashes.'SHA-256' = '5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b']

Labels / Tags

Labels: atomsilo bronze starlight hui loader lockfile night sky pandora ransomware rook

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • Cinnamon Tempest DEV-0401Emperor Dragonfly
    The MITRE Corporation Confidence 100

    [Cinnamon Tempest](https://attack.mitre.org/groups/G1021) is a China-based threat group that has been active since at least 2021 deploying multiple strains of ransomware based on the leaked [Babuk](https://attack.mitre.org/software/S0638) source code. [Cinnamon…

    First seen 01/01/1970 · Last seen 16/11/5138 ·