216.73.217.98

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:36 · Modified 20/12/2025 22:26

Essential information

Value / Name
d2fc2e2b90b23c2a91e144fd8ac22668dd682f7d0145963615203d087c48aca4
Confidence
100/100
Revoked
Yes
Valid from
21/10/2022 08:32
Valid until
24/01/2024 07:32
Pattern type
stix
Published
20/12/2025 19:36
Modified
20/12/2025 22:26
Author / Source
AlienVault

Description

Win32:BotX-gen\ [Trj] SHA256 of 9f68d1a4b33e3ace6215040dc9fc73e8

Pattern

[file:hashes.'SHA-256' = 'd2fc2e2b90b23c2a91e144fd8ac22668dd682f7d0145963615203d087c48aca4']

Labels / Tags

Labels: dll side-loading gozi malicious word document phishing ransomware rm3 variant sandbox evasion steganography ursnif

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.