216.73.217.22

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 23:49 · Modified 21/12/2025 00:12

Essential information

Value / Name
fc85d3da6401b0764a2e8a5f55334a7d683ec20fb8210213feb6148f02a30554
Confidence
100/100
Revoked
Yes
Valid from
20/04/2023 22:14
Valid until
23/07/2024 22:14
Pattern type
stix
Published
20/12/2025 23:49
Modified
21/12/2025 00:12
Author / Source
AlienVault

Description

multiple_versions SHA256 of e4d2799f3001a531d15939b1898399b4

Pattern

[file:hashes.'SHA-256' = 'fc85d3da6401b0764a2e8a5f55334a7d683ec20fb8210213feb6148f02a30554']

Labels / Tags

Labels: apt-c-36 aptc36 blind eagle compression installutil limerat phishing powershell rat vbs

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • APT-C-36 Blind Eagle
    The MITRE Corporation Confidence 100

    [APT-C-36](https://attack.mitre.org/groups/G0099) is a suspected South America espionage group that has been active since at least 2018. The group mainly targets Colombian government institutions as well as important corporations …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 04/05/2026 16:33