216.73.216.233

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 01:40 · Modified 21/12/2025 03:30

Essential information

Value / Name
f3be35f8b8301e39dd3dffc9325553516a085c12dc15494a5e2fce73c77069ed
Confidence
100/100
Revoked
Yes
Valid from
29/02/2024 19:57
Valid until
03/06/2025 20:57
Pattern type
stix
Published
21/12/2025 01:40
Modified
21/12/2025 03:30
Author / Source
AlienVault

Description

Ransom:Win32/Phobos.PC!MTB SHA256 of 43683751209e85571072d953c0bdd44c883045ee

Pattern

[file:hashes.'SHA-256' = 'f3be35f8b8301e39dd3dffc9325553516a085c12dc15494a5e2fce73c77069ed']

Labels / Tags

Labels: 8base education faust fileless attack healthcare ms excel municipal phishing phobos raas ransomware ransomware attack rdp remote access shellcode trojan vba script

Marking (TLP)

TLP:CLEAR