216.73.217.22

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:33 · Modified 20/12/2025 22:39

Essential information

Value / Name
e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98
Confidence
100/100
Revoked
Yes
Valid from
03/11/2022 14:12
Valid until
06/02/2024 14:12
Pattern type
stix
Published
20/12/2025 19:33
Modified
20/12/2025 22:39
Author / Source
AlienVault

Description

HackTool:Win32/Mikatz!dha SHA256 of 655979d56e874fbe7561bb1b6e512316c25cbb19

Pattern

[file:hashes.'SHA-256' = 'e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98']

Labels / Tags

Labels: adfind anydesk avoslocker birddog black basta cobalt strike exploits & vulnerabilities fin7 hive iran log4j log4shell mercury mimikatz nmap powershell powertrash printnightmare proxyshell raas ransomware sysaid zerologon

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (2)

  • FIN7 GOLD NIAGARAITG14
    The MITRE Corporation Confidence 100

    [FIN7](https://attack.mitre.org/groups/G0046) is a financially-motivated threat group that has been active since 2013. [FIN7](https://attack.mitre.org/groups/G0046) has targeted the retail, restaurant, hospitality, software, consulting, financial services, medical equipment, cloud services, media, …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 27/03/2026 01:13
  • MuddyWater Earth VetalaStatic Kitten
    The MITRE Corporation Confidence 100

    [MuddyWater](https://attack.mitre.org/groups/G0069) is a cyber espionage group assessed to be a subordinate element within Iran's Ministry of Intelligence and Security (MOIS).(Citation: CYBERCOM Iranian Intel Cyber January 2022) Since at …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 04/05/2026 16:33