🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for sha256_hash c96f81d0ddbc29f0315c4b0809d97e280051a016b6a6852e5bd88e1a6ec235bc.

Database Entry


IOC ID:2001189
IOC: c96f81d0ddbc29f0315c4b0809d97e280051a016b6a6852e5bd88e1a6ec235bc
IOC Type :sha256_hash
Threat Type :payload
Malware: XWorm
Confidence Level : Confidence level is high (90%)
Is compromised? : False
First seen:2026-10-29 07:59:47 UTC
Last seen:2026-10-29 18:55:37 UTC
UUID:3fed4d1d-d369-11f1-a74e-42010aa4000a
Reporter wristhulk
Reward 5 credits from ThreatFox
Tags:exe Github XWorm

Avatar
wristhulk
XWorm exe (10172416 bytes) served from a GitHub malware lure our hunt found and downloaded; verdict by exact hash: auto 2026-10-29: XWorm (our Triage run 261029-glmhbahw6z: score 10 sheetrat/44caliber/xworm), 1 accounts, 1 URLs (gh-triage-upload).