216.73.217.123

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:42 · Modified 21/12/2025 03:10

Essential information

Value / Name
70c23213096457df852b66443d9a632e66816e023fdf05a93b9087ffb753d916
Confidence
100/100
Revoked
Yes
Valid from
06/02/2024 19:34
Valid until
11/05/2025 20:34
Pattern type
stix
Published
20/12/2025 19:42
Modified
21/12/2025 03:10
Author / Source
AlienVault

Description

Methodology_Suspicious_Shortcut_SMB_URL

Pattern

[file:hashes.'SHA-256' = '70c23213096457df852b66443d9a632e66816e023fdf05a93b9087ffb753d916']

Labels / Tags

Labels: crypto cve-2023-36025 ov3r_stealer phemedrone phemedrone stealer smartscreen bypass

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.