216.73.216.170

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 12:19 · Modified 15/03/2026 18:25

Essential information

Value / Name
8f51f8d5c5c4c3496af197dbfb99167af77b0d9b434297d70df5ecd7a167f74e
Confidence
100/100
Revoked
Yes
Valid from
19/03/2025 10:30
Valid until
15/03/2026 18:23
Pattern type
stix
Published
21/12/2025 12:19
Modified
15/03/2026 18:25
Author / Source
AlienVault

Description

ALF:AGGR:SuspiciousLnkFile

Pattern

[file:hashes.'SHA-256' = '8f51f8d5c5c4c3496af197dbfb99167af77b0d9b434297d70df5ecd7a167f74e']

Labels / Tags

Labels: apt command execution crookbag cve-2024-38213 data theft espionage lnk raspberry robin sandworm shortcut supply chain vulnerability windows zero-day

Marking (TLP)

TLP:CLEAR