216.73.216.133

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:35 · Modified 20/12/2025 21:56

Essential information

Value / Name
http://139.180.216.65/dlpumgr32.exe
Confidence
100/100
Revoked
Yes
Valid from
16/08/2022 11:21
Valid until
02/10/2022 11:21
Pattern type
stix
Published
20/12/2025 19:35
Modified
20/12/2025 21:56
Author / Source
AlienVault

Description

PE32 executable (GUI) Intel 80386, for MS Windows 07758c93ba33843a9c5603f900f2ad0231c64ec77f6bba6de83ed6e2902022e4

Pattern

[url:value = 'http://139.180.216.65/dlpumgr32.exe']

Labels / Tags

Labels: electron app hyperbro luckymouse macos rshell

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.