216.73.216.133

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:36 · Modified 20/12/2025 22:28

Essential information

Value / Name
9a57919cc5c194e28acd62719487c563a8f0ef1205b65adbe535386e34e418b8
Confidence
100/100
Revoked
Yes
Valid from
23/11/2022 10:52
Valid until
26/02/2024 10:52
Pattern type
stix
Published
20/12/2025 19:36
Modified
20/12/2025 22:28
Author / Source
AlienVault

Description

kernel32_dll_xor_exe_key_65

Pattern

[file:hashes.'SHA-256' = '9a57919cc5c194e28acd62719487c563a8f0ef1205b65adbe535386e34e418b8']

Labels / Tags

Labels: nighthawk

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.