216.73.216.197

Indicator (IOC)

stix AlienVault · Published 06/02/2026 17:57 · Modified 14/03/2026 15:25

Essential information

Value / Name
5ab86388bab3c67f7fe741a1179c20a90acc638db79077a8be9cd89ea8069741
Confidence
100/100
Revoked
No
Valid from
06/02/2026 17:18
Valid until
03/02/2027 01:12
Pattern type
stix
Published
06/02/2026 17:57
Modified
14/03/2026 15:25
Author / Source
AlienVault

Description

is__elf

Pattern

[file:hashes.'SHA-256' = '5ab86388bab3c67f7fe741a1179c20a90acc638db79077a8be9cd89ea8069741']

Labels / Tags

Labels: aitm china-nexus darknimbus dknife dns hijacking gateway-monitoring poisonplug.shadow shadowpad traffic manipulation wizardnet

Marking (TLP)

TLP:CLEAR