216.73.217.172

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:41 · Modified 21/12/2025 01:46

Essential information

Value / Name
1a4301019bdf42e7b2df801e04066a738d184deb22afcad9542127b0a31d5cfa
Confidence
100/100
Revoked
Yes
Valid from
05/12/2023 15:25
Valid until
09/03/2025 15:25
Pattern type
stix
Published
20/12/2025 19:41
Modified
21/12/2025 01:46
Author / Source
AlienVault

Description

Win.Exploit.NPPSpy-9956789-0

Pattern

[file:hashes.'SHA-256' = '1a4301019bdf42e7b2df801e04066a738d184deb22afcad9542127b0a31d5cfa']

Labels / Tags

Labels: agent racoon c2 server dll module helper script mimikatz mimilite module ntopsy ntospy powershell

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.