216.73.217.22

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 02:49 · Modified 21/12/2025 02:49

Essential information

Value / Name
91f6f3c11c9a2cfff09dd7be94c2c82314d341d6fb9bc7ac3be04cb235bafc55
Confidence
100/100
Revoked
Yes
Valid from
19/01/2024 15:05
Valid until
23/04/2025 16:05
Pattern type
stix
Published
21/12/2025 02:49
Modified
21/12/2025 02:49
Author / Source
AlienVault

Description

SUSP_ENV_Folder_Root_File_Jan23_1 SHA256 of 5e0f18dfe16f274d34716d011e0a3f39

Pattern

[file:hashes.'SHA-256' = '91f6f3c11c9a2cfff09dd7be94c2c82314d341d6fb9bc7ac3be04cb235bafc55']

Labels / Tags

Labels: apache activemq batch malware c server coinminer cve202144228 cve202346604 downloader exploit june mauricrypt mimo mimus powershell ransomware shell xmrig

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • mimo
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 ·