216.73.217.80

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 23:17 · Modified 20/12/2025 23:17

Essential information

Value / Name
bda4484bb6325dfccaa464c2007a8f20130f0cf359a7f79e14feeab3faa62332
Confidence
100/100
Revoked
Yes
Valid from
06/02/2023 18:16
Valid until
11/05/2024 19:16
Pattern type
stix
Published
20/12/2025 23:17
Modified
20/12/2025 23:17
Author / Source
AlienVault

Description

ALF:PsB64WriteFileProcessStart.A SHA256 of ed7b9ddbaee794cecb80fac794b0e6cb0ae073b5

Pattern

[file:hashes.'SHA-256' = 'bda4484bb6325dfccaa464c2007a8f20130f0cf359a7f79e14feeab3faa62332']

Labels / Tags

Labels: oilrig ta452

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • OilRig COBALT GYPSYIRN2
    The MITRE Corporation Confidence 100

    [OilRig](https://attack.mitre.org/groups/G0049) is a suspected Iranian threat group that has targeted Middle Eastern and international victims since at least 2014. The group has targeted a variety of sectors, including…

    First seen 01/01/1970 · Last seen 16/11/5138 ·