216.73.216.6

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 21:52 · Modified 20/12/2025 21:52

Essential information

Value / Name
59198ffaf74b0e931a1cafe78e20ebf0b16f3a5a03bb4121230a0c44d7b963d2
Confidence
100/100
Revoked
Yes
Valid from
09/08/2022 09:20
Valid until
12/11/2023 08:20
Pattern type
stix
Published
20/12/2025 21:52
Modified
20/12/2025 21:52
Author / Source
AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = '59198ffaf74b0e931a1cafe78e20ebf0b16f3a5a03bb4121230a0c44d7b963d2']

Labels / Tags

Labels: bumblebee cobalt strike dev-0193 exotic lily fin12 wizard spider

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • EXOTIC LILY
    The MITRE Corporation Confidence 100

    [EXOTIC LILY](https://attack.mitre.org/groups/G1011) is a financially motivated group that has been closely linked with [Wizard Spider](https://attack.mitre.org/groups/G0102) and the deployment of ransomware including [Conti](https://attack.mitre.org/software/S0575) and [Diavol](https://attack.mitre.org/software/S0659). [EXOTIC LILY](https://attack.mitre.org/groups/G1011) may be…

    First seen 01/01/1970 · Last seen 16/11/5138 ·