216.73.216.215

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:36 · Modified 20/12/2025 22:22

Essential information

Value / Name
42b603fffd4766fa22f6e10884e7fa43f449d515cfa20a18f0d07a6d4c370962
Confidence
100/100
Revoked
Yes
Valid from
13/10/2022 20:51
Valid until
16/01/2024 19:51
Pattern type
stix
Published
20/12/2025 19:36
Modified
20/12/2025 22:22
Author / Source
AlienVault

Description

GoLandBuildPE

Pattern

[file:hashes.'SHA-256' = '42b603fffd4766fa22f6e10884e7fa43f449d515cfa20a18f0d07a6d4c370962']

Labels / Tags

Labels: backdoor budworm c2 servers credential dumper dll side-loading hyperbro log4j masquerading trojan viewfinity web shells

Marking (TLP)

TLP:CLEAR