216.73.216.215

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:56 · Modified 02/06/2026 07:47

Essential information

Value / Name
13f7599c94b9d4b028ce02397717a1282a46f07b9d3e2f8f2b3213fa8884b029
Confidence
100/100
Revoked
Yes
Valid from
05/06/2025 23:52
Valid until
02/06/2026 07:46
Pattern type
stix
Published
20/12/2025 19:56
Modified
02/06/2026 07:47
Author / Source
AlienVault

Description

KnownMaliciousObfuscationPattern SHA256 of ff9824395c18e1cf70960862654eb0a8b012eeaa

Pattern

[file:hashes.'SHA-256' = '13f7599c94b9d4b028ce02397717a1282a46f07b9d3e2f8f2b3213fa8884b029']

Labels / Tags

Labels: clickfix credential theft document theft lostkeys ngos phishing powershell spica

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • Star Blizzard SEABORGIUMCallisto Group
    The MITRE Corporation Confidence 100

    [Star Blizzard](https://attack.mitre.org/groups/G1033) is a cyber espionage and influence group originating in Russia that has been active since at least 2019. [Star Blizzard](https://attack.mitre.org/groups/G1033) campaigns align closely with Russian state…

    First seen 01/01/1970 · Last seen 16/11/5138 ·