216.73.217.22

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 06:30 · Modified 04/05/2026 16:59

Essential information

Value / Name
5e40d106977017b1ed235419b1e59ff090e1f43ac57da1bb5d80d66ae53b1df8
Confidence
100/100
Revoked
Yes
Valid from
19/09/2024 09:33
Valid until
15/09/2025 17:26
Pattern type
stix
Published
21/12/2025 06:30
Modified
04/05/2026 16:59
Author / Source
AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = '5e40d106977017b1ed235419b1e59ff090e1f43ac57da1bb5d80d66ae53b1df8']

Labels / Tags

Labels: applejeus badcall citrine sleet collectionrat comebacker cryptocurrency cybercrime espionage financial fullhouse kandykorn macos malware northkorea objcshellz odicloader pondrat poolrat pypi rat rats remotepe rustbucket smoothoperator social engineering supply chain attack themeforestrat zero-day

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (2)

  • Gleaming Pisces UNC1720UNC4736
    The MITRE Corporation Confidence 100

    [AppleJeus](https://attack.mitre.org/groups/G1049) is a North Korean state-sponsored threat group attributed to the Reconnaissance General Bureau. Associated with the broader [Lazarus Group](https://attack.mitre.org/groups/G0032) umbrella of actors, [AppleJeus](https://attack.mitre.org/groups/G1049) has been active since …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 04/05/2026 16:59
  • Various North Korean groups under the Reconnaissance General Bureau
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 Published 21/12/2025 06:57 · Modified 21/12/2025 06:57