216.73.216.226

Indicator (IOC)

stix AlienVault · Published 21/12/2025 15:11 · Modified 21/12/2025 16:22

Essential information

Value / Name
944a1a411abb97f9ae547099c4834beb49de0745740ba450efb747bd62d8d83b
Confidence
100/100
Revoked
No
Valid from
30/07/2025 16:35
Valid until
27/07/2026 00:29
Pattern type
stix
Published
21/12/2025 15:11
Modified
21/12/2025 16:22
Author / Source
AlienVault

Description

Win.Ransomware.Barys-10004222-0 SHA256 of 79e19d3d8405425735e4b3cd36a8507d99dfee20

Pattern

[file:hashes.'SHA-256' = '944a1a411abb97f9ae547099c4834beb49de0745740ba450efb747bd62d8d83b']

Labels / Tags

Labels: chacha20 data leak site donot loader double extortion encryption gunra ransomware linux lumma stealer negotiation phishing ransomware windows

Marking (TLP)

TLP:CLEAR