216.73.216.36

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 23:16 · Modified 20/12/2025 23:16

Essential information

Value / Name
1f47770cc42ac8805060004f203a5f537b7473a36ff41eabb746900b2fa24cc8
Confidence
100/100
Revoked
Yes
Valid from
03/02/2023 20:44
Valid until
08/05/2024 21:44
Pattern type
stix
Published
20/12/2025 23:16
Modified
20/12/2025 23:16
Author / Source
AlienVault

Description

#LOWFI:HSTR:MSIL/Obfuscator.Confuser.C

Pattern

[file:hashes.'SHA-256' = '1f47770cc42ac8805060004f203a5f537b7473a36ff41eabb746900b2fa24cc8']

Labels / Tags

Labels: apt34 dotnet karkoff lsass phishing saitama

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • OilRig COBALT GYPSYIRN2
    The MITRE Corporation Confidence 100

    [OilRig](https://attack.mitre.org/groups/G0049) is a suspected Iranian threat group that has targeted Middle Eastern and international victims since at least 2014. The group has targeted a variety of sectors, including…

    First seen 01/01/1970 · Last seen 16/11/5138 ·