216.73.216.133

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:47 · Modified 21/12/2025 10:07

Essential information

Value / Name
14fe0071e76b23673569115042a961136ef057848ad44cf35d9f2ca86bd90d31
Confidence
100/100
Revoked
Yes
Valid from
17/10/2024 11:53
Valid until
13/10/2025 19:47
Pattern type
stix
Published
20/12/2025 19:47
Modified
21/12/2025 10:07
Author / Source
AlienVault

Description

ALF:TrojanDownloader:MacOS/Lador.A!MTB SHA256 of 23f3b070aad47f72ddf2d148f455cce2266901fd

Pattern

[file:hashes.'SHA-256' = '14fe0071e76b23673569115042a961136ef057848ad44cf35d9f2ca86bd90d31']

Labels / Tags

Labels: aws aws-abuse cross-platform data-exfiltration encryption golang lockbit-imitation macos notlockbit ransomware self-deletion

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • NotLockBit
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 ·