IOC: http://89.23.96.203/333/1.exe – Securitricks

216.73.216.36

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 01:34 · Modified 21/12/2025 01:34

Essential information

Value / Name: http://89.23.96.203/333/1.exe
Confidence: 100/100
Revoked: Yes
Valid from: 14/11/2023 10:29
Valid until: 31/12/2023 10:29
Pattern type: stix
Published: 21/12/2025 01:34
Modified: 21/12/2025 01:34
Author / Source: AlienVault

Description

PE32+ executable (GUI) x86-64, for MS Windows eedda61d02d8bd0e145a07e6048621fc84f420376e6cda2616c2d77d4fd4fe18

Pattern

[url:value = 'http://89.23.96.203/333/1.exe']

Labels / Tags

Labels: cyclops extortion knight ransomware remcos windows

Marking (TLP)

TLP:CLEAR