216.73.217.172

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:39 · Modified 21/12/2025 07:04

Essential information

Value / Name
d5c2f87033a5baeeb1b5b681f2c4a156ff1c05ccd1bfdaf6eae019fc4d5320ee
Confidence
100/100
Revoked
Yes
Valid from
10/10/2024 18:05
Valid until
07/10/2025 01:59
Pattern type
stix
Published
20/12/2025 19:39
Modified
21/12/2025 07:04
Author / Source
AlienVault

Description

RareEquities_LibTomCrypt SHA256 of 338d4f4ec714359d589918cee1adad12ef231907

Pattern

[file:hashes.'SHA-256' = 'd5c2f87033a5baeeb1b5b681f2c4a156ff1c05ccd1bfdaf6eae019fc4d5320ee']

Labels / Tags

Labels: critical infrastructure data breach espionage hacktivism lockbit malware mingw/gcc powershell qilin raas ransomhub ransomware ransomware-as-a-service registry modification rhysida securex united states

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.