TF-MAL-elf.xagent
📛 Threat Title
Malware family: X-Agent
Description
ThreatFox malware family `elf.xagent`. Printable name: X-Agent. Aliases: splm,chopstick,fysbis.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
elf.xagent
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/elf.xagent
IOC database
- Type
- domain
- Value
elf.xagent- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-elf.xagent
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/elf.xagent
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:attack.mitre.org
MITRE ATT&CK ® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community. With the creation of ATT&CK, MITRE is fulfilling its mission ...
-
web:docs.trellix.com
After an infected file is placed in quarantine, the Endpoint Security (HX) xAgent 's malware protection engines perform specific remediation actions to prevent the infection from spreading to other files on the host endpoint or to other endpoints on your network. These remediation actions include cleaning the infected file, removing any malware traces, and notifying the endpoint user when a ...
-
web:en.wikipedia.org
X-Agent or XAgent is a spyware and malware program designed to collect and transmit hacked files from machines running Windows, Linux, iOS, or Android, to servers operated by hackers.
-
web:genai.owasp.org
Explore key threats and mitigation strategies for agentic AI, focusing on security measures to address vulnerabilities in AI applications and their potential risks.
-
web:grokipedia.com
X-Agent is a modular backdoor malware family implemented in C++, consisting of a core AgentKernel component that orchestrates module execution, local storage, and bidirectional communication with command-and-control (C2) servers. [3]
-
web:learn.microsoft.com
Microsoft Defender Vulnerability Management allows you to remediate vulnerabilities discovered in your environment through actionable security recommendations. You can create remediation requests that your IT administrator team can use to remediate vulnerabilities using Microsoft Intune.
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the X-Agent malware family including references, samples and yara signatures.
-
web:microsoft.github.io
Security and IT teams must review vulnerability findings, prioritize remediation based on severity, and apply fixes using agentless or agent -based scanning tools.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.linkedin.com
XAgent is a spyware targeting iOS devices, representing a mobile implant. Publicly attributed to the group APT28 (also known as Sofacy or Fancy Bear), XAgent is consistent with TTPs of targeting ...
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.