216.73.216.6

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:46 · Modified 21/12/2025 05:59

Essential information

Value / Name
8284c44f87ab8471918da564152ffcc28348a671e3a9316876b075cdf03c3607
Confidence
100/100
Revoked
Yes
Valid from
10/09/2021 10:02
Valid until
14/12/2022 09:02
Pattern type
stix
Published
20/12/2025 19:46
Modified
21/12/2025 05:59
Author / Source
AlienVault

Description

#LOWFI:HSTR:MSIL/Obfuscator.Confuser.C

Pattern

[file:hashes.'SHA-256' = '8284c44f87ab8471918da564152ffcc28348a671e3a9316876b075cdf03c3607']

Labels / Tags

Labels: apt41 cobalt strike eath baku scramblecross stealthmutant stealthvector

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • APT41 Wicked PandaBrass Typhoon
    The MITRE Corporation Confidence 100

    [APT41](https://attack.mitre.org/groups/G0096) is a threat group that researchers have assessed as Chinese state-sponsored espionage group that also conducts financially-motivated operations. Active since at least 2012, [APT41](https://attack.mitre.org/groups/G0096) has been observed…

    First seen 01/01/1970 · Last seen 16/11/5138 ·