216.73.216.36

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 00:56 · Modified 21/12/2025 00:56

Essential information

Value / Name
39e62d69ec3da04c3a3778fcd8dfbfc75cce9ac1e62df75537cc1b022d951cf5
Confidence
100/100
Revoked
Yes
Valid from
04/07/2023 18:12
Valid until
06/10/2024 18:12
Pattern type
stix
Published
21/12/2025 00:56
Modified
21/12/2025 00:56
Author / Source
AlienVault

Description

ConventionEngine_Term_Desktop SHA256 of e3b37459489a863351d855e594df93bf

Pattern

[file:hashes.'SHA-256' = '39e62d69ec3da04c3a3778fcd8dfbfc75cce9ac1e62df75537cc1b022d951cf5']

Labels / Tags

Labels: backdoor dropping elephant hangover maha grass patchwork sidewinder warhawk white elephant

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • Sidewinder T-APT-04Rattlesnake
    The MITRE Corporation Confidence 100

    [Sidewinder](https://attack.mitre.org/groups/G0121) is a suspected Indian threat actor group that has been active since at least 2012. They have been observed targeting government, military, and business entities throughout Asia,…

    First seen 01/01/1970 · Last seen 16/11/5138 ·