216.73.217.172

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:32 · Modified 20/12/2025 21:22

Essential information

Value / Name
ba73116c7cf6faf3aa97b497cf7472b2a115a3b5ad7ad85f7919ff81a1ff2b9a
Confidence
100/100
Revoked
Yes
Valid from
13/06/2022 16:27
Valid until
16/09/2023 16:27
Pattern type
stix
Published
20/12/2025 19:32
Modified
20/12/2025 21:22
Author / Source
AlienVault

Description

DeviousDrone, TA457 SHA256 of 8199f14502e80581000bd5b3bda250ee

Pattern

[file:hashes.'SHA-256' = 'ba73116c7cf6faf3aa97b497cf7472b2a115a3b5ad7ad85f7919ff81a1ff2b9a']

Labels / Tags

Labels: .net apt backdoor cve201711882 el machete geopolitical conflict lyceum sidewinder spear-phishing ukraine

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (3)

  • El Machete, Lyceum, SideWinder
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • El Machete, SideWinder, Lyceum
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • HEXANE LyceumSiamesekitten
    The MITRE Corporation Confidence 100

    [HEXANE](https://attack.mitre.org/groups/G1001) is a cyber espionage threat group that has targeted oil & gas, telecommunications, aviation, and internet service provider organizations since at least 2017. Targeted companies have been…

    First seen 01/01/1970 · Last seen 16/11/5138 ·