216.73.216.36

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:32 · Modified 20/12/2025 21:26

Essential information

Value / Name
221292a9f77f1a16fa0a7ed41b0eedbd312475dd9a5104c7923ed7889ea0f292
Confidence
100/100
Revoked
Yes
Valid from
24/06/2022 12:59
Valid until
27/09/2023 12:59
Pattern type
stix
Published
20/12/2025 19:32
Modified
20/12/2025 21:26
Author / Source
AlienVault

Description

SHA256 of 13814a190f61b36aff24d6aa1de56fe2

Pattern

[file:hashes.'SHA-256' = '221292a9f77f1a16fa0a7ed41b0eedbd312475dd9a5104c7923ed7889ea0f292']

Labels / Tags

Labels: .net apt backdoor cve201711882 el machete geopolitical conflict iran lyceum sidewinder spear-phishing ukraine

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (3)

  • El Machete, Lyceum, SideWinder
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • El Machete, SideWinder, Lyceum
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • HEXANE LyceumSiamesekitten
    The MITRE Corporation Confidence 100

    [HEXANE](https://attack.mitre.org/groups/G1001) is a cyber espionage threat group that has targeted oil & gas, telecommunications, aviation, and internet service provider organizations since at least 2017. Targeted companies have been…

    First seen 01/01/1970 · Last seen 16/11/5138 ·