216.73.217.172

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 22:13 · Modified 20/12/2025 22:13

Essential information

Value / Name
f361bafcc00b1423d24a7ea205264f5a0b96011e4928d9a91c2abc9911b433a1
Confidence
100/100
Revoked
Yes
Valid from
26/10/2022 09:11
Valid until
29/01/2024 08:11
Pattern type
stix
Published
20/12/2025 22:13
Modified
20/12/2025 22:13
Author / Source
AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'f361bafcc00b1423d24a7ea205264f5a0b96011e4928d9a91c2abc9911b433a1']

Labels / Tags

Labels: blackbyte exbyte exfiltration infostealer

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • BlackByte Hecamede
    The MITRE Corporation Confidence 100

    [BlackByte](https://attack.mitre.org/groups/G1043) is a ransomware threat actor operating since at least 2021. [BlackByte](https://attack.mitre.org/groups/G1043) is associated with several versions of ransomware also labeled [BlackByte Ransomware](https://attack.mitre.org/software/S1180). [BlackByte](https://attack.mitre.org/groups/G1043) ransomware operations initially used…

    First seen 01/01/1970 · Last seen 16/11/5138 ·