216.73.217.64

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:45 · Modified 21/12/2025 05:17

Essential information

Value / Name
c2618fb013135485f9f9aa27983df3371dfdcb7beecde86d02cee0c258d5ed7f
Confidence
100/100
Revoked
Yes
Valid from
08/07/2024 12:45
Valid until
11/10/2025 12:45
Pattern type
stix
Published
20/12/2025 19:45
Modified
21/12/2025 05:17
Author / Source
AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'c2618fb013135485f9f9aa27983df3371dfdcb7beecde86d02cee0c258d5ed7f']

Labels / Tags

Labels: backdoor evasion fileless msbuild powershell snake uroburos

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.