>samit_hota
Back to IOCs

Indicators of Compromise

1 INDICATORSG1008win.xenorat

XenoRAT — Indicators of Compromise

Samit Hota·
#ioc#xenorat

Overview

Indicators of compromise associated with XenoRAT. 1 indicator listed below, linked to the G1008 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
ip:port202.60.229.104:6000August 7, 2026100%

Related content

Adversary Profile

SideCopy Threat Actor Profile: Persistent Espionage in South Asia

IOCs

404 Keylogger — Indicators of Compromise

IOCs

5.t Downloader — Indicators of Compromise

IOCs

Aberebot — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call