216.73.217.64

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:55 · Modified 27/03/2026 01:08

Essential information

Value / Name
bad43a1c8ba1dacf3daf82bc30a0673f9bc2675ea6cdedd34624ffc933b959f4
Confidence
100/100
Revoked
Yes
Valid from
25/03/2025 22:10
Valid until
22/03/2026 06:03
Pattern type
stix
Published
20/12/2025 19:55
Modified
27/03/2026 01:08
Author / Source
AlienVault

Description

RansomWin32Nobig

Pattern

[file:hashes.'SHA-256' = 'bad43a1c8ba1dacf3daf82bc30a0673f9bc2675ea6cdedd34624ffc933b959f4']

Labels / Tags

Labels: backdoor c&c cve-2025-26633 darkwisp disease vector encrypthub encrypthub stealer github infostealer lolbins msc eviltwin powershell rhadamanthys sha256 silentprism stealc stealer trojanspy water gamayun windows zero-day

Marking (TLP)

TLP:CLEAR