216.73.216.215

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:45 · Modified 21/12/2025 08:03

Essential information

Value / Name
weg7sdx54bevnvulapqu6bpzwztryeflq3s23tegbmnhkbpqz637f2yd.onion
Confidence
100/100
Revoked
Yes
Valid from
20/11/2024 23:03
Valid until
17/09/2025 00:03
Pattern type
stix
Published
20/12/2025 19:45
Modified
21/12/2025 08:03
Author / Source
AlienVault

Description

No description.

Pattern

[domain-name:value = 'weg7sdx54bevnvulapqu6bpzwztryeflq3s23tegbmnhkbpqz637f2yd.onion']

Labels / Tags

Labels: blacksuit cobalt strike credential theft cybersecurity data exfiltration encryption extortion gootloader lateral movement mimikatz nanodump ransomware supply chain attack systembc threat analysis

Marking (TLP)

TLP:CLEAR