Indicator detail

    4c380111…ae3c

    SHA-1Score 92Activeindirect syscalls

    Confirmed by 2 sourcesTracked for 56 days

    First seen
    Last seen

    Tags

    • indirect syscalls
    • information stealer
    • evasion techniques
    • vidar
    • remus
    • xworm

    Source provenance

    Which feed reported this indicator, when, and with what confidence — plus the raw per-source tags.

    Sources that reported this indicator, with confidence and time range
    Tags
    AlienVault OTX54 %indirect syscalls, information stealer, evasion techniques, vidar, remus, xworm, loader, payload encryption, 2cloader, anti-analysis, pulse:2CLoader: A New Malware Loader Delivering Vidar and Remus
    abuse.ch ThreatFox92 %Vidar, payload

    Back to indicator overview