216.73.216.133

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:33 · Modified 20/12/2025 20:03

Essential information

Value / Name
986c3796ceadfcd7cb6f5cc81e9e0c2d4e3622d2ef0763bf342f32286574bebb
Confidence
100/100
Revoked
Yes
Valid from
19/07/2021 17:16
Valid until
22/10/2022 17:16
Pattern type
stix
Published
20/12/2025 19:33
Modified
20/12/2025 20:03
Author / Source
AlienVault

Description

apt_win_Derusbi_TTF_ConfigDecrypt SHA256 of a7e4f42ad70ddd380281985302573491

Pattern

[file:hashes.'SHA-256' = '986c3796ceadfcd7cb6f5cc81e9e0c2d4e3622d2ef0763bf342f32286574bebb']

Labels / Tags

Labels: apt40 cert china cisa uscert

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.