216.73.216.41

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 00:13 · Modified 21/12/2025 00:13

Essential information

Value / Name
a6d9022eff8fc6e0915d90a1fa8ceec29240f1dbd61f8f94182ef4c1371858cf
Confidence
100/100
Revoked
Yes
Valid from
24/03/2023 14:08
Valid until
26/06/2024 15:08
Pattern type
stix
Published
21/12/2025 00:13
Modified
21/12/2025 00:13
Author / Source
AlienVault

Description

SLF:Win32/LnkFileWithMshta.A SHA256 of 5be4e4884f4e021ba975cbed0a7e9c25

Pattern

[file:hashes.'SHA-256' = 'a6d9022eff8fc6e0915d90a1fa8ceec29240f1dbd61f8f94182ef4c1371858cf']

Labels / Tags

Labels: allakore apt cyrus india sidecopy

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • SideCopy
    The MITRE Corporation Confidence 100

    [SideCopy](https://attack.mitre.org/groups/G1008) is a Pakistani threat group that has primarily targeted South Asian countries, including Indian and Afghani government personnel, since at least 2019. [SideCopy](https://attack.mitre.org/groups/G1008)'s name comes from its…

    First seen 01/01/1970 · Last seen 16/11/5138 ·