216.73.217.172

Indicator (IOC)

stix AlienVault · Published 20/12/2025 19:40 · Modified 21/12/2025 17:24

Essential information

Value / Name
c92c158d7c37fea795114fa6491fe5f145ad2f8c08776b18ae79db811e8e36a3
Confidence
100/100
Revoked
No
Valid from
09/09/2025 00:59
Valid until
05/09/2026 08:52
Pattern type
stix
Published
20/12/2025 19:40
Modified
21/12/2025 17:24
Author / Source
AlienVault

Description

TEL:Trojan:Win32/SuspLDAPQuery.A

Pattern

[file:hashes.'SHA-256' = 'c92c158d7c37fea795114fa6491fe5f145ad2f8c08776b18ae79db811e8e36a3']

Labels / Tags

Labels: adobe acrobat document betruger cobalt strike data exfiltration flawed grace flawedgrace grixba lateral movement lsass memory mbr killer multi-group affiliation powershell ransomware raspberry robin sectoprat systembc teleport truebot

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.