216.73.217.22

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 01:14 · Modified 21/12/2025 01:26

Essential information

Value / Name
030cbd1a51f8583ccfc3fa38a28a5550dc1c84c05d6c0f5eb887d13dedf1da01
Confidence
100/100
Revoked
Yes
Valid from
18/09/2023 10:23
Valid until
21/12/2024 09:23
Pattern type
stix
Published
21/12/2025 01:14
Modified
21/12/2025 01:26
Author / Source
AlienVault

Description

Win64:Trojan-gen SHA256 of 02c37ccdfccfe03560a4bf069f46e8ae3a5d2348

Pattern

[file:hashes.'SHA-256' = '030cbd1a51f8583ccfc3fa38a28a5550dc1c84c05d6c0f5eb887d13dedf1da01']

Labels / Tags

Labels: .net agent.btz apt capibar comrat comrat v4 crutch kazuar kopiluwak pensive ursa python quietcanary the crutch backdoor tinyturla turla

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.