216.73.216.215

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 05:28 · Modified 08/06/2026 08:01

Essential information

Value / Name
3314b6ea393e180c20db52448ab6980343bc3ed623f7af91df60189fec637744
Confidence
100/100
Revoked
Yes
Valid from
12/06/2025 00:07
Valid until
08/06/2026 08:00
Pattern type
stix
Published
21/12/2025 05:28
Modified
08/06/2026 08:01
Author / Source
AlienVault

Description

stack_string SHA256 of 537806c02659a12c5b21efa51b2322c1

Pattern

[file:hashes.'SHA-256' = '3314b6ea393e180c20db52448ab6980343bc3ed623f7af91df60189fec637744']

Labels / Tags

Labels: aerospace appleseed apt babyshark backdoor defense dll file espionage execution facebook flowerpower golddragon kimsuky kimsuky group linkedin nikigo nikihttp northkorea powershell shell telegram username vmprotect

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.