216.73.216.40

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 21:45 · Modified 20/12/2025 23:26

Essential information

Value / Name
1bc44eef75779e3ca1eefb8ff5a64807dbc942b1e4a2672d77b9f6928d292591
Confidence
100/100
Revoked
Yes
Valid from
24/02/2023 18:03
Valid until
29/05/2024 19:03
Pattern type
stix
Published
20/12/2025 21:45
Modified
20/12/2025 23:26
Author / Source
AlienVault

Description

Win32:DangerousSig\ [Trj] SHA256 of 61b25d11392172e587d8da3045812a66c3385451

Pattern

[file:hashes.'SHA-256' = '1bc44eef75779e3ca1eefb8ff5a64807dbc942b1e4a2672d77b9f6928d292591']

Labels / Tags

Labels: active directory group policy apostle arguepatch caddywiper comet destover doublezero hermeticwiper isaacwiper israbye killdisk meteor notpetya ordinypt petya powergap script shamoon sqlshred stonedrill swiftslicer ukraine whispergate wiper wipers zerocleare

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.