216.73.217.22

BlackJack

· Published 21/12/2025 06:41 · Modified 21/12/2025 06:41 · Source: AlienVault

Essential information

Confidence
100/100
Published
21/12/2025 06:41
Modified
21/12/2025 06:41
Updated at
21/12/2025 06:41
Revoked
No
Author / Source
AlienVault
Resource level
—
Primary motivation
—
Related entities
1 reports, 20 attack patterns (mitre), 3 malware, 2 sectors, 1 countries, 1 indicators

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Reports (1)

Attack patterns (MITRE) (20)

  • T1485 uses
    Data Destruction
  • T1036 uses
    Masquerading
  • T1561 uses
    Disk Wipe
  • T1561.002 uses
    Disk Structure Wipe
  • T1570 uses
    Lateral Tool Transfer
  • T1047 uses
    Windows Management Instrumentation
  • T1021.001 uses
    Remote Desktop Protocol
  • T1003 uses
    OS Credential Dumping
  • T1136 uses
    Create Account
  • T1053.005 uses
    Scheduled Task
  • T1021.002 uses
    SMB/Windows Admin Shares
  • T1078 uses
    Valid Accounts
  • T1078.002 uses
    Domain Accounts
  • T1486 uses
    Data Encrypted for Impact
  • T1569.002 uses
    Service Execution
  • T1078.003 uses
    Local Accounts
  • T1105 uses
    Ingress Tool Transfer
  • T1021 uses
    Remote Services
  • T1490 uses
    Inhibit System Recovery
  • T1552 uses
    Unsecured Credentials

Malware (3)

  • Shamoon
  • LockBit uses
    Family
    Published 06/05/2026 10:26 · Modified 06/05/2026 10:26
  • Shamoon - S0140 uses
    Family
    Published 04/03/2026 15:30 · Modified 04/03/2026 15:30

Sectors (2)

  • Telecommunications targets
  • Government targets

Countries (1)

  • Russian Federation targets

Indicators (1)

  • 535e0dbd97cb9ea66f375400b550dd3bcad0788a89fb46996a651053a2df07c3 indicates