216.73.217.22

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 05:28 · Modified 20/05/2026 06:11

Essential information

Value / Name
5b3cc9cced1ef0cb0bba5549cc2ac09c49ae10554d2409ea16bc5e118d278c15
Confidence
100/100
Revoked
Yes
Valid from
23/05/2025 22:17
Valid until
20/05/2026 06:11
Pattern type
stix
Published
21/12/2025 05:28
Modified
20/05/2026 06:11
Author / Source
AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = '5b3cc9cced1ef0cb0bba5549cc2ac09c49ae10554d2409ea16bc5e118d278c15']

Labels / Tags

Labels: aerospace backdoor certificate exploitation certificate leak defense espionage kimsuky nexaweb nikigo nikihttp northkorea signed malware

Marking (TLP)

TLP:CLEAR