216.73.216.6

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 01:34 · Modified 21/12/2025 01:34

Essential information

Value / Name
http://89.23.96.203/333/7.exe
Confidence
100/100
Revoked
Yes
Valid from
14/11/2023 10:29
Valid until
31/12/2023 10:29
Pattern type
stix
Published
21/12/2025 01:34
Modified
21/12/2025 01:34
Author / Source
AlienVault

Description

PE32+ executable (GUI) x86-64, for MS Windows 7aa4903001e55982d11c76c178d9006aaaf137c5a941067cc6bf1b91edde62a1

Pattern

[url:value = 'http://89.23.96.203/333/7.exe']

Labels / Tags

Labels: cyclops extortion knight ransomware remcos windows

Marking (TLP)

TLP:CLEAR