216.73.216.36

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 21:52 · Modified 20/12/2025 21:52

Essential information

Value / Name
fa2b74bfc9359efba61ed7625d20f9afc11a7933ebc9653e8e9b1e44be39c455
Confidence
100/100
Revoked
Yes
Valid from
09/08/2022 09:20
Valid until
12/11/2023 08:20
Pattern type
stix
Published
20/12/2025 21:52
Modified
20/12/2025 21:52
Author / Source
AlienVault

Description

SHA256 of 974ffbfae36e9a41ac672f9793ce1bee18f2e670

Pattern

[file:hashes.'SHA-256' = 'fa2b74bfc9359efba61ed7625d20f9afc11a7933ebc9653e8e9b1e44be39c455']

Labels / Tags

Labels: bumblebee cobalt strike dev-0193 exotic lily fin12 wizard spider

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • EXOTIC LILY
    The MITRE Corporation Confidence 100

    [EXOTIC LILY](https://attack.mitre.org/groups/G1011) is a financially motivated group that has been closely linked with [Wizard Spider](https://attack.mitre.org/groups/G0102) and the deployment of ransomware including [Conti](https://attack.mitre.org/software/S0575) and [Diavol](https://attack.mitre.org/software/S0659). [EXOTIC LILY](https://attack.mitre.org/groups/G1011) may be…

    First seen 01/01/1970 · Last seen 16/11/5138 ·