216.73.217.24

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:41 · Modified 21/12/2025 01:46

Essential information

Value / Name
f45ea12579f636026d29009190221864f432dbc3e26e73d8f3ab7835fa595b86
Confidence
100/100
Revoked
Yes
Valid from
05/12/2023 15:25
Valid until
09/03/2025 15:25
Pattern type
stix
Published
20/12/2025 19:41
Modified
21/12/2025 01:46
Author / Source
AlienVault

Description

Win.Exploit.NPPSpy-9956789-0

Pattern

[file:hashes.'SHA-256' = 'f45ea12579f636026d29009190221864f432dbc3e26e73d8f3ab7835fa595b86']

Labels / Tags

Labels: agent racoon c2 server dll module helper script mimikatz mimilite module ntopsy ntospy powershell

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.