216.73.216.233

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 01:39 · Modified 21/12/2025 03:30

Essential information

Value / Name
a91491f45b851a07f91ba5a200967921bf796d38677786de51a4a8fe5ddeafd2
Confidence
100/100
Revoked
Yes
Valid from
29/02/2024 19:57
Valid until
03/06/2025 20:57
Pattern type
stix
Published
21/12/2025 01:39
Modified
21/12/2025 03:30
Author / Source
AlienVault

Description

Win.Malware.Phobos-6981135-0 SHA256 of c88fad293256bfead6962124394de4f8b97765aa

Pattern

[file:hashes.'SHA-256' = 'a91491f45b851a07f91ba5a200967921bf796d38677786de51a4a8fe5ddeafd2']

Labels / Tags

Labels: 8base education faust fileless attack healthcare ms excel municipal phishing phobos raas ransomware ransomware attack rdp remote access shellcode trojan vba script

Marking (TLP)

TLP:CLEAR