216.73.217.22

KAWA4096

· Published 21/12/2025 15:04 · Modified 21/12/2025 15:04 · Source: AlienVault

Essential information

Confidence
100/100
Published
21/12/2025 15:04
Modified
21/12/2025 15:04
Updated at
21/12/2025 15:04
Revoked
No
Author / Source
AlienVault
Resource level
—
Primary motivation
—
Related entities
1 reports, 13 attack patterns (mitre), 1 malware, 2 countries, 4 indicators

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Reports (1)

Attack patterns (MITRE) (13)

  • T1204.002 uses
    Malicious File
  • T1059.003 uses
    Windows Command Shell
  • T1070.004 uses
    File Deletion
  • T1078 uses
    Valid Accounts
  • T1112 uses
    Modify Registry
  • T1489 uses
    Service Stop
  • T1027 uses
    Obfuscated Files or Information
  • T1021.002 uses
    SMB/Windows Admin Shares
  • T1490 uses
    Inhibit System Recovery
  • T1222 uses
    File and Directory Permissions Modification
  • T1083 uses
    File and Directory Discovery
  • T1057 uses
    Process Discovery
  • T1486 uses
    Data Encrypted for Impact

Malware (1)

  • KAWA4096 uses
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 Published 21/12/2025 15:04 · Modified 21/12/2025 15:04

Countries (2)

  • Japan targets
  • United States of America targets

Indicators (4)