216.73.217.172

Indicator (IOC)

stix AlienVault · Published 20/12/2025 20:00 · Modified 21/12/2025 18:17

Essential information

Value / Name
0fff8fb05cee8dc4a4f7a8f23fa2d67571f360a3025b6d515f9ef37dfdb4e2ea
Confidence
100/100
Revoked
No
Valid from
29/08/2025 22:20
Valid until
26/08/2026 06:13
Pattern type
stix
Published
20/12/2025 20:00
Modified
21/12/2025 18:17
Author / Source
AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = '0fff8fb05cee8dc4a4f7a8f23fa2d67571f360a3025b6d515f9ef37dfdb4e2ea']

Labels / Tags

Labels: aes-256-gcm berserkstealer clickfix code obfuscation credential stealer data theft double extortion europe fake updaters file encryption interlock interlock ransomware interlock rat lumma north america openssl powershell backdoor ransomware remote access trojan rsa-4096

Marking (TLP)

TLP:CLEAR