216.73.217.64

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:42 · Modified 21/12/2025 03:10

Essential information

Value / Name
69941417f26c207f7cbbbe36ce8b4d976640a3d7f407d316932428e427f1980b
Confidence
100/100
Revoked
Yes
Valid from
06/02/2024 19:34
Valid until
11/05/2025 20:34
Pattern type
stix
Published
20/12/2025 19:42
Modified
21/12/2025 03:10
Author / Source
AlienVault

Description

Methodology_Suspicious_Shortcut_SMB_URL

Pattern

[file:hashes.'SHA-256' = '69941417f26c207f7cbbbe36ce8b4d976640a3d7f407d316932428e427f1980b']

Labels / Tags

Labels: crypto cve-2023-36025 ov3r_stealer phemedrone phemedrone stealer smartscreen bypass

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.