216.73.217.172

Indicator (IOC)

stix AlienVault · Published 20/12/2025 20:01 · Modified 03/01/2026 07:47

Essential information

Value / Name
6b938659bc6f705c0665220d234e4c4d158fd10a9b6af8efd7fe30040bb29936
Confidence
100/100
Revoked
No
Valid from
28/11/2025 09:39
Valid until
24/11/2026 17:33
Pattern type
stix
Published
20/12/2025 20:01
Modified
03/01/2026 07:47
Author / Source
AlienVault

Description

Win.Malware.Trojanx-10035542-0 SHA256 of 5b86889fd1d7de954d7d331bb85a0f97942be1a7

Pattern

[file:hashes.'SHA-256' = '6b938659bc6f705c0665220d234e4c4d158fd10a9b6af8efd7fe30040bb29936']

Labels / Tags

Labels: babuk cve-2025-4427 cve-2025-4428 cve-2025-53770 cyberspionage ivanti krustyloader lockbit rce vulnerabilities russian targets sharepoint sliver thor

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • QuietCrabs
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 ·