216.73.216.170

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:55 · Modified 31/03/2026 04:22

Essential information

Value / Name
84b438fac113615c2e81f440de2cafa4e2ccd74adc4867d73df30bb9d01dcdb6
Confidence
100/100
Revoked
Yes
Valid from
03/04/2025 20:27
Valid until
31/03/2026 04:21
Pattern type
stix
Published
20/12/2025 19:55
Modified
31/03/2026 04:22
Author / Source
AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = '84b438fac113615c2e81f440de2cafa4e2ccd74adc4867d73df30bb9d01dcdb6']

Labels / Tags

Labels: critical infrastructure cyber espionage file stealing government powershell ukraine vbscript wrecksteel

Marking (TLP)

TLP:CLEAR