216.73.217.22

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 00:14 · Modified 21/12/2025 01:26

Essential information

Value / Name
0fc624aa9656a8bc21731bfc47fd7780da38a7e8ad7baf1529ccd70a5bb07852
Confidence
100/100
Revoked
Yes
Valid from
18/09/2023 10:23
Valid until
21/12/2024 09:23
Pattern type
stix
Published
21/12/2025 00:14
Modified
21/12/2025 01:26
Author / Source
AlienVault

Description

ALFPER:Trojan:MSIL/Kapooshka.B!dha SHA256 of 902b27a5fd2e5f17e5340e350afa037549ce9faa

Pattern

[file:hashes.'SHA-256' = '0fc624aa9656a8bc21731bfc47fd7780da38a7e8ad7baf1529ccd70a5bb07852']

Labels / Tags

Labels: .net agent.btz apt capibar comrat comrat v4 crutch jlorat kazuar kopiluwak pensive ursa python quietcanary ratel rocketman roopy telemeris the crutch backdoor tinyturla tomiris topinambour tunnus tunnussched turla

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (2)

  • Tomiris
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Turla IRON HUNTERGroup 88
    The MITRE Corporation Confidence 100

    [Turla](https://attack.mitre.org/groups/G0010) is a cyber espionage threat group that has been attributed to Russia's Federal Security Service (FSB). They have compromised victims in over 50 countries since at least…

    First seen 01/01/1970 · Last seen 16/11/5138 ·