216.73.217.139

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:35 · Modified 20/12/2025 22:03

Essential information

Value / Name
84164e1e8074c2565d3cd178babd93694ce54811641a77ffdc8d1084dd468afb
Confidence
100/100
Revoked
Yes
Valid from
05/10/2022 20:25
Valid until
08/01/2024 19:25
Pattern type
stix
Published
20/12/2025 19:35
Modified
20/12/2025 22:03
Author / Source
AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = '84164e1e8074c2565d3cd178babd93694ce54811641a77ffdc8d1084dd468afb']

Labels / Tags

Labels: .net executable apt covalentstealer credential harvesting exfiltration ifileworker information stealer obfuscated powershell trojan

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.