216.73.217.172

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:34 · Modified 20/12/2025 21:33

Essential information

Value / Name
11821100e595623666b42e67f536279817f2f2fc5058edee7c09b8400e179c51
Confidence
100/100
Revoked
Yes
Valid from
07/07/2022 10:58
Valid until
10/10/2023 10:58
Pattern type
stix
Published
20/12/2025 19:34
Modified
20/12/2025 21:33
Author / Source
AlienVault

Description

Backdoor:MSIL/Bladabindi SHA256 of 7e0430ef032fef57fb55dd805853a35b

Pattern

[file:hashes.'SHA-256' = '11821100e595623666b42e67f536279817f2f2fc5058edee7c09b8400e179c51']

Labels / Tags

Labels: apt-c-23 aridviper delphi desert falcon frozencell micropsia rat

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • APT-C-23 MantisDesert Falcon
    The MITRE Corporation Confidence 100

    [APT-C-23](https://attack.mitre.org/groups/G1028) is a threat group that has been active since at least 2014.(Citation: symantec_mantis) [APT-C-23](https://attack.mitre.org/groups/G1028) has primarily focused its operations on the Middle East, including Israeli military assets.…

    First seen 01/01/1970 · Last seen 16/11/5138 ·