216.73.217.86

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:35 · Modified 20/12/2025 21:43

Essential information

Value / Name
http://ppz.devel.gns.com.br/temps/donexx.exe
Confidence
100/100
Revoked
Yes
Valid from
22/07/2022 14:06
Valid until
07/09/2022 14:06
Pattern type
stix
Published
20/12/2025 19:35
Modified
20/12/2025 21:43
Author / Source
AlienVault

Description

Win32:PWSX-gen\ [Trj]

Pattern

[url:value = 'http://ppz.devel.gns.com.br/temps/donexx.exe']

Labels / Tags

Labels: agenttesla avemaria rat warzone rat

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.