216.73.217.172

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 04:50 · Modified 21/12/2025 04:50

Essential information

Value / Name
ff945b3565f63cef7bb214a93c623688759ee2805a8c574f00237660b1c4d3fd
Confidence
100/100
Revoked
Yes
Valid from
16/05/2024 18:46
Valid until
19/08/2025 18:46
Pattern type
stix
Published
21/12/2025 04:50
Modified
21/12/2025 04:50
Author / Source
AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'ff945b3565f63cef7bb214a93c623688759ee2805a8c574f00237660b1c4d3fd']

Labels / Tags

Labels: backdoor gobear linux linux.gomir malware northkorea southkorea troll stealer

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.