216.73.216.233

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 22:06 · Modified 20/12/2025 22:06

Essential information

Value / Name
eeb793d904be48934d728027dc9d96e3feea3ded1e97d7eceae3c19887bf8a38
Confidence
100/100
Revoked
Yes
Valid from
13/10/2022 20:28
Valid until
16/01/2024 19:28
Pattern type
stix
Published
20/12/2025 22:06
Modified
20/12/2025 22:06
Author / Source
AlienVault

Description

Armadillov1xxv2xx SHA256 of 4d2eb6e03be068f364e8e3f3c9645e03e1052e66

Pattern

[file:hashes.'SHA-256' = 'eeb793d904be48934d728027dc9d96e3feea3ded1e97d7eceae3c19887bf8a38']

Labels / Tags

Labels: c2 channel credential dumper credential harvesting deepsoft fake certificates keylogger mssql server nanodump port relay tool reproduced sqlmaggie screencap sqlmaggie wip19

Marking (TLP)

TLP:CLEAR