TF-MAL-osx.xagent
📛 Threat Title
Malware family: X-Agent
Description
ThreatFox malware family `osx.xagent`. Printable name: X-Agent.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
osx.xagent
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/osx.xagent
IOC database
- Type
- domain
- Value
osx.xagent- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-osx.xagent
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/osx.xagent
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:attack.mitre.org
ASTAROTH MALWARE USES LEGITIMATE OS AND ANTIVIRUS PROCESSES TO STEAL PASSWORDS AND PERSONAL DATA. Retrieved April 17, 2019. Jornet, A. (2021, December 23). Snip3, an investigation into malware . Retrieved September 19, 2023. Yuste, J. Pastrana, S. (2021, February 9). Avaddon ransomware: an in-depth analysis and decryption of infected systems.
-
web:docs.trellix.com
After an infected file is placed in quarantine, the Endpoint Security (HX) xAgent 's malware protection engines perform specific remediation actions to prevent the infection from spreading to other files on the host endpoint or to other endpoints on your network. These remediation actions include cleaning the infected file, removing any malware traces, and notifying the endpoint user when a ...
-
web:en.wikipedia.org
X-Agent or XAgent is a spyware and malware program designed to collect and transmit hacked files from machines running Windows, Linux, iOS, or Android, to servers operated by hackers.
-
web:genai.owasp.org
Explore key threats and mitigation strategies for agentic AI, focusing on security measures to address vulnerabilities in AI applications and their potential risks.
-
web:grokipedia.com
X-Agent is a modular backdoor malware family implemented in C++, consisting of a core AgentKernel component that orchestrates module execution, local storage, and bidirectional communication with command-and-control (C2) servers. [3]
-
web:learn.microsoft.com
Microsoft Defender Vulnerability Management allows you to remediate vulnerabilities discovered in your environment through actionable security recommendations. You can create remediation requests that your IT administrator team can use to remediate vulnerabilities using Microsoft Intune.
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the X-Agent malware family including references, samples and yara signatures.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.crowdstrike.com
Remediate faster Execute built-in commands or custom scripts to easily carry out complex remediation actions on any managed endpoint remotely. Connect to and quickly isolate the impacted endpoint, then remove malicious files to immediately shut down the attack.
-
web:www.linkedin.com
XAgent is a spyware targeting iOS devices, representing a mobile implant. Publicly attributed to the group APT28 (also known as Sofacy or Fancy Bear), XAgent is consistent with TTPs of targeting ...
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.