216.73.216.6

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:37 · Modified 21/12/2025 01:46

Essential information

Value / Name
e43d66b7a4fa09a0714c573fbe4996770d9d85e31912480e73344124017098f9
Confidence
100/100
Revoked
Yes
Valid from
06/11/2023 17:54
Valid until
08/02/2025 17:54
Pattern type
stix
Published
20/12/2025 19:37
Modified
21/12/2025 01:46
Author / Source
AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'e43d66b7a4fa09a0714c573fbe4996770d9d85e31912480e73344124017098f9']

Labels / Tags

Labels: agonizing serpens apostle aspxspy asyncrat bfg agonizer blackshadow bsod gmer driver impersoni-fake-ator irafau merlin mimikatz nbtscan phishing pinkman plink procdump proxyshell quarian ransomware torat unit webshells winscp wiper

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (2)

  • Agrius Pink SandstormAMERICIUM
    The MITRE Corporation Confidence 100

    [Agrius](https://attack.mitre.org/groups/G1030) is an Iranian threat actor active since 2020 notable for a series of ransomware and wiper operations in the Middle East, with an emphasis on Israeli targets.(Citation:…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • BackdoorDiplomacy
    The MITRE Corporation Confidence 100

    [BackdoorDiplomacy](https://attack.mitre.org/groups/G0135) is a cyber espionage threat group that has been active since at least 2017. [BackdoorDiplomacy](https://attack.mitre.org/groups/G0135) has targeted Ministries of Foreign Affairs and telecommunication companies in Africa, Europe,…

    First seen 01/01/1970 · Last seen 16/11/5138 ·