216.73.217.172

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:41 · Modified 21/12/2025 01:46

Essential information

Value / Name
7eb901a6dbf41bcb2e0cdcbb67c53ab722604d6c985317cb2b479f4c4de7cf90
Confidence
100/100
Revoked
Yes
Valid from
05/12/2023 15:25
Valid until
09/03/2025 15:25
Pattern type
stix
Published
20/12/2025 19:41
Modified
21/12/2025 01:46
Author / Source
AlienVault

Description

Win.Exploit.NPPSpy-9956789-0

Pattern

[file:hashes.'SHA-256' = '7eb901a6dbf41bcb2e0cdcbb67c53ab722604d6c985317cb2b479f4c4de7cf90']

Labels / Tags

Labels: agent racoon c2 server dll module helper script mimikatz mimilite module ntopsy ntospy powershell

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.