216.73.216.169

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:46 · Modified 15/03/2026 18:25

Essential information

Value / Name
2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e
Confidence
100/100
Revoked
Yes
Valid from
19/03/2025 10:30
Valid until
15/03/2026 18:23
Pattern type
stix
Published
20/12/2025 19:46
Modified
15/03/2026 18:25
Author / Source
AlienVault

Description

ALF:AGGR:SuspiciousLnkFile.B

Pattern

[file:hashes.'SHA-256' = '2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e']

Labels / Tags

Labels: apt autoit command execution data theft downloader espionage konni lilith lilith rat lnk obfuscation raspberry robin rat shortcut vulnerability windows zero-day

Marking (TLP)

TLP:CLEAR