216.73.217.24

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:38 · Modified 20/12/2025 23:47

Essential information

Value / Name
be4211fe5c1a19ff393a2bcfa21dad8d0a687663263a63789552bda446d9421b
Confidence
100/100
Revoked
Yes
Valid from
27/02/2023 15:20
Valid until
01/06/2024 16:20
Pattern type
stix
Published
20/12/2025 19:38
Modified
20/12/2025 23:47
Author / Source
AlienVault

Description

WIN.Trojan.NCX SHA256 of e0fb946c00b140693e3cf5de258c22a1

Pattern

[file:hashes.'SHA-256' = 'be4211fe5c1a19ff393a2bcfa21dad8d0a687663263a63789552bda446d9421b']

Labels / Tags

Labels: buhti cobalt strike cve-2022-47966 cyber espionage darkcomet initial access brokers manageengine netcat ransomware rat-el

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.