216.73.217.139

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:38 · Modified 20/12/2025 23:47

Essential information

Value / Name
0f4bf8506a2560c568b9815124dfc43a11c561ed611829df841ec7aba8302359
Confidence
100/100
Revoked
Yes
Valid from
27/02/2023 15:20
Valid until
01/06/2024 16:20
Pattern type
stix
Published
20/12/2025 19:38
Modified
20/12/2025 23:47
Author / Source
AlienVault

Description

ConventionEngine_Keyword_Bot SHA256 of 9a1d9fe9b1223273c314632d04008384

Pattern

[file:hashes.'SHA-256' = '0f4bf8506a2560c568b9815124dfc43a11c561ed611829df841ec7aba8302359']

Labels / Tags

Labels: buhti cobalt strike cve-2022-47966 cyber espionage darkcomet initial access brokers manageengine netcat ransomware rat-el

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.