216.73.217.172

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:33 · Modified 20/12/2025 20:12

Essential information

Value / Name
f2ce101698952e1c4309f8696fd43d694a79d35bb090e6a7fd4651c8f41794a3
Confidence
100/100
Revoked
Yes
Valid from
18/05/2022 12:07
Valid until
21/08/2023 12:07
Pattern type
stix
Published
20/12/2025 19:33
Modified
20/12/2025 20:12
Author / Source
AlienVault

Description

gen_tool_udt_udp_data_transfer_dev SHA256 of 9ec2f21641bd3f482b4c85cd6050432dc05e7680

Pattern

[file:hashes.'SHA-256' = 'f2ce101698952e1c4309f8696fd43d694a79d35bb090e6a7fd4651c8f41794a3']

Labels / Tags

Labels: bh_a006 deed rat dll side-loading mykloadclient plugx redsip rtlshare space pirates winnti zupdax

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.