216.73.217.64

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:38 · Modified 20/12/2025 23:47

Essential information

Value / Name
0490ceace858ff7949b90ab4acf4867878815d2557089c179c9971b2dd0918b9
Confidence
100/100
Revoked
Yes
Valid from
27/02/2023 18:50
Valid until
01/06/2024 19:50
Pattern type
stix
Published
20/12/2025 19:38
Modified
20/12/2025 23:47
Author / Source
AlienVault

Description

ConventionEngine_Term_Desktop

Pattern

[file:hashes.'SHA-256' = '0490ceace858ff7949b90ab4acf4867878815d2557089c179c9971b2dd0918b9']

Labels / Tags

Labels: cyberespionage earth preta exfiltration plugx sideloading win32 dll win32 exe

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.