216.73.216.170

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:33 · Modified 20/12/2025 20:11

Essential information

Value / Name
0b525e66587e564db10bb814495aefb5884d74745297f33503d32b1fec78343f
Confidence
100/100
Revoked
Yes
Valid from
18/05/2022 13:04
Valid until
21/08/2023 13:04
Pattern type
stix
Published
20/12/2025 19:33
Modified
20/12/2025 20:11
Author / Source
AlienVault

Description

VBA:Downloader-FDB\ [Trj]

Pattern

[file:hashes.'SHA-256' = '0b525e66587e564db10bb814495aefb5884d74745297f33503d32b1fec78343f']

Labels / Tags

Labels: gamaredon geopolitical conflict groooboor malicious document pterodo

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.