216.73.216.233

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 23:47 · Modified 20/12/2025 23:47

Essential information

Value / Name
5cbc07895d099ce39a3142025c557b7fac41d79914535ab7ffc2094809f12a4b
Confidence
100/100
Revoked
Yes
Valid from
30/03/2023 00:40
Valid until
02/07/2024 00:40
Pattern type
stix
Published
20/12/2025 23:47
Modified
20/12/2025 23:47
Author / Source
AlienVault

Description

vad_contains_network_strings SHA256 of bc6cb78e20cb20285149d55563f6fdcf4aaafa58 SHA256 of bc6cb78e20cb20285149d55563f6fdcf4aaafa58

Pattern

[file:hashes.'SHA-256' = '5cbc07895d099ce39a3142025c557b7fac41d79914535ab7ffc2094809f12a4b']

Labels / Tags

Labels: android backdoor bypass user code signing crypto mining espionage ingress tool install digital mshta phishing run keys

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • Kimsuky Black BansheeVelvet Chollima
    The MITRE Corporation Confidence 100

    [Kimsuky](https://attack.mitre.org/groups/G0094) is a North Korea-based cyber espionage group that has been active since at least 2012. The group initially targeted South Korean government agencies, think tanks, and subject-matter…

    First seen 01/01/1970 · Last seen 16/11/5138 ·