216.73.216.36

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 00:46 · Modified 21/12/2025 07:07

Essential information

Value / Name
downld.net
Confidence
100/100
Revoked
Yes
Valid from
15/10/2024 15:29
Valid until
11/08/2025 15:29
Pattern type
stix
Published
21/12/2025 00:46
Modified
21/12/2025 07:07
Author / Source
AlienVault

Description

No description.

Pattern

[domain-name:value = 'downld.net']

Labels / Tags

Labels: android apt apt-c-17 apt-q-39 babyelephant backdoor loader module cve-2017-11882 espionage groupa21 hardcore nationalist hn2 infrastructure moduleinstaller post-exploitation rattlesnake razor tiger rtf exploit sidewinder spear-phishing stealerbot t-apt-04

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.