216.73.216.170

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:36 · Modified 20/12/2025 22:25

Essential information

Value / Name
8c6f9a15ec399171f965c82efbda3235364264727e3a8eb65ec7e6491f5821d2
Confidence
100/100
Revoked
Yes
Valid from
18/11/2022 15:04
Valid until
21/02/2024 15:04
Pattern type
stix
Published
20/12/2025 19:36
Modified
20/12/2025 22:25
Author / Source
AlienVault

Description

SUSP_SFX_RunProgram_WScript

Pattern

[file:hashes.'SHA-256' = '8c6f9a15ec399171f965c82efbda3235364264727e3a8eb65ec7e6491f5821d2']

Labels / Tags

Labels: cobalt strike cve201711882 hz rat

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.