216.73.217.64

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:55 · Modified 27/03/2026 01:21

Essential information

Value / Name
405d1dcdbba56bce99a308734c39ac8ca62ffb55dbd69565293a79b468e4dad1
Confidence
100/100
Revoked
Yes
Valid from
25/03/2025 22:10
Valid until
22/03/2026 06:03
Pattern type
stix
Published
20/12/2025 19:55
Modified
27/03/2026 01:21
Author / Source
AlienVault

Description

ALF:PsB64WriteFileProcessStart.A

Pattern

[file:hashes.'SHA-256' = '405d1dcdbba56bce99a308734c39ac8ca62ffb55dbd69565293a79b468e4dad1']

Labels / Tags

Labels: backdoor c&c cve-2025-26633 darkwisp disease vector encrypthub encrypthub stealer github infostealer lolbins msc eviltwin powershell rhadamanthys sha256 silentprism stealc stealer trojanspy water gamayun windows zero-day

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.