216.73.216.77

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:33 · Modified 20/12/2025 20:09

Essential information

Value / Name
https://marmaris.com.ua/misc/Updater-Microsoft.exe
Confidence
100/100
Revoked
Yes
Valid from
09/05/2022 13:04
Valid until
25/06/2022 13:04
Pattern type
stix
Published
20/12/2025 19:33
Modified
20/12/2025 20:09
Author / Source
AlienVault

Description

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows a2234ee40097fa832eb3a533840e86de3933cf216fbf8445d2946cb7b61c887b

Pattern

[url:value = 'https://marmaris.com.ua/misc/Updater-Microsoft.exe']

Labels / Tags

Labels: geopolitical conflict jesterstealer office macro

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.