216.73.217.22

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 01:14 · Modified 21/12/2025 01:26

Essential information

Value / Name
b93484683014aca8e909c9b5648d8f0ac21a45d0c193f6ca40f0b01d2464c1c4
Confidence
100/100
Revoked
Yes
Valid from
18/09/2023 10:23
Valid until
21/12/2024 09:23
Pattern type
stix
Published
21/12/2025 01:14
Modified
21/12/2025 01:26
Author / Source
AlienVault

Description

Win.Trojan.ComRAT-9797302-0 SHA256 of d117643019d665a29ce8a7b812268fb8d3e5aadb

Pattern

[file:hashes.'SHA-256' = 'b93484683014aca8e909c9b5648d8f0ac21a45d0c193f6ca40f0b01d2464c1c4']

Labels / Tags

Labels: .net agent.btz apt capibar comrat comrat v4 crutch kazuar kopiluwak pensive ursa python quietcanary the crutch backdoor tinyturla turla

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • Turla IRON HUNTERGroup 88
    The MITRE Corporation Confidence 100

    [Turla](https://attack.mitre.org/groups/G0010) is a cyber espionage threat group that has been attributed to Russia's Federal Security Service (FSB). They have compromised victims in over 50 countries since at least…

    First seen 01/01/1970 · Last seen 16/11/5138 ·