216.73.217.22

PcShare

AlienVault · Published 20/12/2025 20:12 · Modified 20/12/2025 20:12

Essential information

Confidence
100/100
Is family
No
Published
20/12/2025 20:12
Modified
20/12/2025 20:12
Revoked
No
Author / Source
AlienVault
Related entities
25 attack patterns (mitre), 4 sectors, 5 countries, 25 indicators, 1 vulnerabilities (cve)

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.

Attack patterns (MITRE) (25 / 48)

  • T1057 uses
    Process Discovery
  • T1033 uses
    System Owner/User Discovery
  • T1574 uses
    Hijack Execution Flow
  • T1069 uses
    Permission Groups Discovery
  • T1021 uses
    Remote Services
  • T1071 uses
    Application Layer Protocol
  • T1569 uses
    System Services
  • T1040 uses
    Network Sniffing
  • T1090 uses
    Proxy
  • T1553 uses
    Subvert Trust Controls
  • T1218 uses
    System Binary Proxy Execution
  • T1087 uses
    Account Discovery
  • T1049 uses
    System Network Connections Discovery
  • T1059 uses
    Command and Scripting Interpreter
  • T1566 uses
    Phishing
  • T1083 uses
    File and Directory Discovery
  • T1571 uses
    Non-Standard Port
  • T1555 uses
    Credentials from Password Stores
  • T1547 uses
    Boot or Logon Autostart Execution
  • T1106 uses
    Native API
  • T1082 uses
    System Information Discovery
  • T1560 uses
    Archive Collected Data
  • T1132 uses
    Data Encoding
  • T1543 uses
    Create or Modify System Process
  • T1027 uses
    Obfuscated Files or Information

Sectors (4)

  • Government targets
  • Energy targets
  • Finance targets
  • Aerospace targets

Countries (5)

  • Russian Federation targets
  • Kyrgyzstan targets
  • Kazakhstan targets
  • Georgia targets
  • Mongolia targets

Indicators (25 / 100)

Vulnerabilities (CVE) (1)

CVE-2017-0213 KEV
7.3 High

Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.

Attack vector
LOCAL
Complexity
LOW
Published
12/05/2017
Modified
22/04/2026