216.73.216.6

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 21:52 · Modified 20/12/2025 21:52

Essential information

Value / Name
c1b8e9d77a6aea4fc7bed4a2a48515aa32a3922859c9091cecf1b5f381a87127
Confidence
100/100
Revoked
Yes
Valid from
09/08/2022 09:20
Valid until
12/11/2023 08:20
Pattern type
stix
Published
20/12/2025 21:52
Modified
20/12/2025 21:52
Author / Source
AlienVault

Description

SHA256 of 6c87ca630c294773ab760d88587667f26e0213a3

Pattern

[file:hashes.'SHA-256' = 'c1b8e9d77a6aea4fc7bed4a2a48515aa32a3922859c9091cecf1b5f381a87127']

Labels / Tags

Labels: bumblebee cobalt strike dev-0193 exotic lily fin12 wizard spider

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • EXOTIC LILY
    The MITRE Corporation Confidence 100

    [EXOTIC LILY](https://attack.mitre.org/groups/G1011) is a financially motivated group that has been closely linked with [Wizard Spider](https://attack.mitre.org/groups/G0102) and the deployment of ransomware including [Conti](https://attack.mitre.org/software/S0575) and [Diavol](https://attack.mitre.org/software/S0659). [EXOTIC LILY](https://attack.mitre.org/groups/G1011) may be…

    First seen 01/01/1970 · Last seen 16/11/5138 ·