216.73.216.36

Indicator (IOC)

stix AlienVault · Published 20/12/2025 20:01 · Modified 03/01/2026 07:47

Essential information

Value / Name
dad3d871e48ecf1bc022914f6ba471dbc2e0f861495337138b0766064d640911
Confidence
100/100
Revoked
No
Valid from
28/11/2025 09:39
Valid until
24/11/2026 17:33
Pattern type
stix
Published
20/12/2025 20:01
Modified
03/01/2026 07:47
Author / Source
AlienVault

Description

ConventionEngine_Keyword_Inject SHA256 of d7ccfa0a9ca30c6b631ab638e95101b5e1ceb5ca

Pattern

[file:hashes.'SHA-256' = 'dad3d871e48ecf1bc022914f6ba471dbc2e0f861495337138b0766064d640911']

Labels / Tags

Labels: babuk cve-2025-4427 cve-2025-4428 cve-2025-53770 cyberspionage ivanti krustyloader lockbit rce vulnerabilities russian targets sharepoint sliver thor

Marking (TLP)

TLP:CLEAR