IOC: http://172.86.75.220/123.hta – Securitricks

216.73.216.133

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 00:02 · Modified 21/12/2025 00:02

Essential information

Value / Name: http://172.86.75.220/123.hta
Confidence: 100/100
Revoked: Yes
Valid from: 14/03/2023 20:38
Valid until: 30/04/2023 21:38
Pattern type: stix
Published: 21/12/2025 00:02
Modified: 21/12/2025 00:02
Author / Source: AlienVault

Description

HTML document, ASCII text, with very long lines, with CRLF line terminators c02c7b9a82a75cb251b2b7307503284a408f20e689f1be30fe50173a8b6e288b

Pattern

[url:value = 'http://172.86.75.220/123.hta']

Labels / Tags

Labels: avemaria espionage infostealer lodarat meterpreter phishing stink telegram warzone yorotrooper

Marking (TLP)

TLP:CLEAR