216.73.217.139

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:36 · Modified 20/12/2025 22:22

Essential information

Value / Name
233bb85dbeba69231533408501697695a66b7790e751925231d64bddf80bbf91
Confidence
100/100
Revoked
Yes
Valid from
13/10/2022 20:51
Valid until
16/01/2024 19:51
Pattern type
stix
Published
20/12/2025 19:36
Modified
20/12/2025 22:22
Author / Source
AlienVault

Description

HKTL_CobaltStrike_Beacon_XOR_Strings

Pattern

[file:hashes.'SHA-256' = '233bb85dbeba69231533408501697695a66b7790e751925231d64bddf80bbf91']

Labels / Tags

Labels: backdoor budworm c2 servers credential dumper dll side-loading hyperbro log4j masquerading trojan viewfinity web shells

Marking (TLP)

TLP:CLEAR