216.73.217.172

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:38 · Modified 20/12/2025 23:59

Essential information

Value / Name
bd57e944999f9dee5ee5c21dc804753c732e7735b2fc7a32fe7b8c0dcb4fc196
Confidence
100/100
Revoked
Yes
Valid from
12/04/2023 15:19
Valid until
15/07/2024 15:19
Pattern type
stix
Published
20/12/2025 19:38
Modified
20/12/2025 23:59
Author / Source
AlienVault

Description

TELPER:Trojan:Win32/ShortWick.B!dha SHA256 of dd185e2bb02b21e59fb958a4e12689a7

Pattern

[file:hashes.'SHA-256' = 'bd57e944999f9dee5ee5c21dc804753c732e7735b2fc7a32fe7b8c0dcb4fc196']

Labels / Tags

Labels: backdoor blindingcan copperhedge deathnote gopuram lazarus macros manuscrypt mimikatz nukesped roaming mantis trojanized pdf ultravnc viewer winrar

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.