TF-MAL-apk.popr-d30
📛 Threat Title
Malware family: X-Agent
Description
ThreatFox malware family `apk.popr-d30`. Printable name: X-Agent. Aliases: Popr-d30.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.popr
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.popr
IOC database
- Type
- domain
- Value
apk.popr- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.popr-d30
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.popr
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:attack.mitre.org
ASTAROTH MALWARE USES LEGITIMATE OS AND ANTIVIRUS PROCESSES TO STEAL PASSWORDS AND PERSONAL DATA. Retrieved April 17, 2019. Jornet, A. (2021, December 23). Snip3, an investigation into malware . Retrieved September 19, 2023. Yuste, J. Pastrana, S. (2021, February 9). Avaddon ransomware: an in-depth analysis and decryption of infected systems.
-
web:docs.trellix.com
After an infected file is placed in quarantine, the Endpoint Security (HX) xAgent 's malware protection engines perform specific remediation actions to prevent the infection from spreading to other files on the host endpoint or to other endpoints on your network. These remediation actions include cleaning the infected file, removing any malware traces, and notifying the endpoint user when a ...
-
web:en.wikipedia.org
X-Agent or XAgent is a spyware and malware program designed to collect and transmit hacked files from machines running Windows, Linux, iOS, or Android, to servers operated by hackers.
-
web:genai.owasp.org
Explore key threats and mitigation strategies for agentic AI, focusing on security measures to address vulnerabilities in AI applications and their potential risks.
-
web:grokipedia.com
X-Agent is a modular backdoor malware family implemented in C++, consisting of a core AgentKernel component that orchestrates module execution, local storage, and bidirectional communication with command-and-control (C2) servers. [3]
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the X-Agent malware family including references, samples and yara signatures.
-
web:microsoft.github.io
Security and IT teams must review vulnerability findings, prioritize remediation based on severity, and apply fixes using agentless or agent -based scanning tools.
-
web:phoenix.security
VS Code extension malware hit GitHub on May 20, 2026. TeamPCP exfiltrated 3,800 internal repos. No CVE. Full analysis, IOCs, detection.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.linkedin.com
XAgent is a spyware targeting iOS devices, representing a mobile implant. Publicly attributed to the group APT28 (also known as Sofacy or Fancy Bear), XAgent is consistent with TTPs of targeting ...
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.