216.73.217.172

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:33 · Modified 20/12/2025 20:01

Essential information

Value / Name
4d94232ec587f991017ed134ea2635e85c883ca868b96e552f9b5ac5691cdaf5
Confidence
100/100
Revoked
Yes
Valid from
06/05/2022 12:22
Valid until
09/08/2023 12:22
Pattern type
stix
Published
20/12/2025 19:33
Modified
20/12/2025 20:01
Author / Source
AlienVault

Description

Win32:PWSX-gen\ [Trj]

Pattern

[file:hashes.'SHA-256' = '4d94232ec587f991017ed134ea2635e85c883ca868b96e552f9b5ac5691cdaf5']

Labels / Tags

Labels: netdooka privateloader

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.