216.73.217.24

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 22:13 · Modified 20/12/2025 22:13

Essential information

Value / Name
aeb1b789395357e8cc8dbd313b95f624fc03e037984040cd7c1704775bfb4bd2
Confidence
100/100
Revoked
Yes
Valid from
26/10/2022 09:11
Valid until
29/01/2024 08:11
Pattern type
stix
Published
20/12/2025 22:13
Modified
20/12/2025 22:13
Author / Source
AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'aeb1b789395357e8cc8dbd313b95f624fc03e037984040cd7c1704775bfb4bd2']

Labels / Tags

Labels: blackbyte exbyte exfiltration infostealer

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (1)

  • BlackByte Hecamede
    The MITRE Corporation Confidence 100

    [BlackByte](https://attack.mitre.org/groups/G1043) is a ransomware threat actor operating since at least 2021. [BlackByte](https://attack.mitre.org/groups/G1043) is associated with several versions of ransomware also labeled [BlackByte Ransomware](https://attack.mitre.org/software/S1180). [BlackByte](https://attack.mitre.org/groups/G1043) ransomware operations initially used…

    First seen 01/01/1970 · Last seen 16/11/5138 ·