216.73.216.6

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:46 · Modified 21/12/2025 05:59

Essential information

Value / Name
bf34dfb4140c00d23554b03ebb986b2734a2c396877681d526e2ac80b372268a
Confidence
100/100
Revoked
Yes
Valid from
10/09/2021 10:02
Valid until
14/12/2022 09:02
Pattern type
stix
Published
20/12/2025 19:46
Modified
21/12/2025 05:59
Author / Source
AlienVault

Description

Win64:Trojan-gen

Pattern

[file:hashes.'SHA-256' = 'bf34dfb4140c00d23554b03ebb986b2734a2c396877681d526e2ac80b372268a']

Labels / Tags

Labels: apt41 cobalt strike eath baku scramblecross stealthmutant stealthvector

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • APT41 Wicked PandaBrass Typhoon
    The MITRE Corporation Confidence 100

    [APT41](https://attack.mitre.org/groups/G0096) is a threat group that researchers have assessed as Chinese state-sponsored espionage group that also conducts financially-motivated operations. Active since at least 2012, [APT41](https://attack.mitre.org/groups/G0096) has been observed…

    First seen 01/01/1970 · Last seen 16/11/5138 ·