216.73.217.64

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:42 · Modified 21/12/2025 03:10

Essential information

Value / Name
6bd8449de1e1bdd62a86284ed17266949654f758e00e10d8cd59ec4d233c32e5
Confidence
100/100
Revoked
Yes
Valid from
06/02/2024 19:34
Valid until
11/05/2025 20:34
Pattern type
stix
Published
20/12/2025 19:42
Modified
21/12/2025 03:10
Author / Source
AlienVault

Description

Methodology_Suspicious_Shortcut_SMB_URL

Pattern

[file:hashes.'SHA-256' = '6bd8449de1e1bdd62a86284ed17266949654f758e00e10d8cd59ec4d233c32e5']

Labels / Tags

Labels: crypto cve-2023-36025 ov3r_stealer phemedrone phemedrone stealer smartscreen bypass

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.