216.73.217.64

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:36 · Modified 20/12/2025 22:26

Essential information

Value / Name
88de34ad95486071b8796d95150461a8a7968d1eb8817772e892d258f3aa1c91
Confidence
100/100
Revoked
Yes
Valid from
21/10/2022 08:32
Valid until
24/01/2024 07:32
Pattern type
stix
Published
20/12/2025 19:36
Modified
20/12/2025 22:26
Author / Source
AlienVault

Description

Win64:Evo-gen\ [Susp] SHA256 of f4b0a6ab164f7c58cccce651606caede

Pattern

[file:hashes.'SHA-256' = '88de34ad95486071b8796d95150461a8a7968d1eb8817772e892d258f3aa1c91']

Labels / Tags

Labels: dll side-loading gozi malicious word document phishing ransomware rm3 variant sandbox evasion steganography ursnif

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.