Indicator detail

    220f8c63…96d3

    SHA-1Score 54Activeindirect syscalls

    Confirmed by one sourceTracked for 30 days

    First seen
    Last seen

    Tags

    • indirect syscalls
    • information stealer
    • evasion techniques
    • vidar
    • remus
    • xworm

    Source provenance

    Which feed reported this indicator, when, and with what confidence — plus the raw per-source tags.

    Sources that reported this indicator, with confidence and time range
    Tags
    AlienVault OTX54 %indirect syscalls, information stealer, evasion techniques, vidar, remus, xworm, loader, payload encryption, 2cloader, anti-analysis, pulse:2CLoader: A New Malware Loader Delivering Vidar and Remus

    Back to indicator overview