216.73.217.80

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 19:29 · Modified 21/12/2025 19:29

Essential information

Value / Name
5d65faf710753e0675cfa99669619f3ecc4187cc7e1b32eb16a97f9cd90cbd8c
Confidence
100/100
Revoked
Yes
Valid from
30/10/2020 19:00
Valid until
02/02/2022 19:00
Pattern type
stix
Published
21/12/2025 19:29
Modified
21/12/2025 19:29
Author / Source
AlienVault

Description

SHA256 of 135f68e708cc04e362703ad71be5f620

Pattern

[file:hashes.'SHA-256' = '5d65faf710753e0675cfa99669619f3ecc4187cc7e1b32eb16a97f9cd90cbd8c']

Labels / Tags

Labels: cobalt strike kegtap ransomware ryuk trickbot

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • Wizard Spider TEMP.MixMasterGrim Spider
    The MITRE Corporation Confidence 100

    [Wizard Spider](https://attack.mitre.org/groups/G0102) is a Russia-based financially motivated threat group originally known for the creation and deployment of [TrickBot](https://attack.mitre.org/software/S0266) since at least 2016. [Wizard Spider](https://attack.mitre.org/groups/G0102) possesses a diverse arsenal…

    First seen 01/01/1970 · Last seen 16/11/5138 ·