216.73.217.22

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 00:14 · Modified 21/12/2025 01:26

Essential information

Value / Name
009406c1c7c0b289a25d44dfaa8364633d9b71df5f3c7a65deec1ef00a8c2ebb
Confidence
100/100
Revoked
Yes
Valid from
18/09/2023 10:23
Valid until
21/12/2024 09:23
Pattern type
stix
Published
21/12/2025 00:14
Modified
21/12/2025 01:26
Author / Source
AlienVault

Description

ALFPER:Trojan:Win32/RoubmaniPot.A!dha SHA256 of 15e710a107830b193124a6d2bbc785b9383262a9

Pattern

[file:hashes.'SHA-256' = '009406c1c7c0b289a25d44dfaa8364633d9b71df5f3c7a65deec1ef00a8c2ebb']

Labels / Tags

Labels: apt capibar comrat crutch jlorat kazuar kopiluwak pensive ursa quietcanary ratel rocketman roopy telemeris tinyturla tomiris topinambour tunnus tunnussched turla

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (2)

  • Tomiris
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 Published 21/12/2025 00:13 · Modified 21/12/2025 00:13
  • Turla IRON HUNTERGroup 88
    The MITRE Corporation Confidence 100

    [Turla](https://attack.mitre.org/groups/G0010) is a cyber espionage threat group that has been attributed to Russia's Federal Security Service (FSB). They have compromised victims in over 50 countries since at least …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 04/05/2026 16:33