216.73.217.172

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:37 · Modified 20/12/2025 22:53

Essential information

Value / Name
34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c
Confidence
100/100
Revoked
Yes
Valid from
13/12/2022 11:28
Valid until
17/03/2024 11:28
Pattern type
stix
Published
20/12/2025 19:37
Modified
20/12/2025 22:53
Author / Source
AlienVault

Description

Win32:DropperX-gen\ [Drp] SHA256 of 625be3e4dbfb0bd35c9cda216a9bca7232dbec07

Pattern

[file:hashes.'SHA-256' = '34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c']

Labels / Tags

Labels: .net framework fargo mallox mssql server ransomware targetcompany

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.