216.73.216.215

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:33 · Modified 20/12/2025 20:12

Essential information

Value / Name
dd82a7b9b5dc0ee1f9e9f19d46212f3e2a1d09a816f5c0ece96275ee221fca13
Confidence
100/100
Revoked
Yes
Valid from
18/05/2022 12:07
Valid until
21/08/2023 12:07
Pattern type
stix
Published
20/12/2025 19:33
Modified
20/12/2025 20:12
Author / Source
AlienVault

Description

SHA256 of cf0fb4950130abddead04c21316912418562bf8a

Pattern

[file:hashes.'SHA-256' = 'dd82a7b9b5dc0ee1f9e9f19d46212f3e2a1d09a816f5c0ece96275ee221fca13']

Labels / Tags

Labels: bh_a006 deed rat dll side-loading mykloadclient plugx redsip rtlshare space pirates winnti zupdax

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.