216.73.216.170

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:46 · Modified 15/03/2026 18:25

Essential information

Value / Name
5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d
Confidence
100/100
Revoked
Yes
Valid from
19/03/2025 10:30
Valid until
15/03/2026 18:23
Pattern type
stix
Published
20/12/2025 19:46
Modified
15/03/2026 18:25
Author / Source
AlienVault

Description

SUSP_PowerShell_Caret_Obfuscation_2

Pattern

[file:hashes.'SHA-256' = '5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d']

Labels / Tags

Labels: apt autoit command execution data theft downloader espionage konni lilith lilith rat lnk obfuscation raspberry robin rat shortcut vulnerability windows zero-day

Marking (TLP)

TLP:CLEAR