#ioc#xworm
Overview
Indicators of compromise associated with XWorm. 17 indicators listed below, linked to the G0099 adversary profile.
Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.
| Type | Indicator | First Seen | Confidence |
|---|---|---|---|
| ip:port | 166.88.132.80:2323 | July 20, 2026 | 75% |
| md5_hash | d1dc20911470ed43af8bce0355fd0cf7 | July 20, 2026 | 95% |
| sha256_hash | 80571d10fe416a63ceb0c3b582c547573c41c1b1108ebda0e5604edf4532ff97 | July 20, 2026 | 95% |
| sha1_hash | cf7fa092c3cec9deb2bb4a008535f540a6d1ec46 | July 20, 2026 | 95% |
| ip:port | 102.220.160.143:5010 | July 16, 2026 | 75% |
| ip:port | 64.89.161.16:1470 | July 16, 2026 | 75% |
| ip:port | 217.60.195.17:7007 | July 16, 2026 | 75% |
| sha256_hash | 19d6b52e50a865b56f34724d77af88b87e065c179d91ea6614d7e36ce1370216 | July 14, 2026 | 95% |
| sha1_hash | 15585c70f6dc9bfb5a73d8a70766c63355997dda | July 14, 2026 | 95% |
| md5_hash | a36374b54d03e24d666466928d208624 | July 14, 2026 | 95% |
| md5_hash | 4faa4dc2ba332b3ea09ce2e4480e9663 | July 14, 2026 | 95% |
| sha256_hash | 0251d469d95ad1bde34b0ab228dfff4ee2bdff73f0612e6bc481667c757596cf | July 14, 2026 | 95% |
| sha1_hash | bc7d674aa2dbd5aab2e00b85f536681b766441a1 | July 14, 2026 | 95% |
| md5_hash | aecbad9bc246f34850ea7eb99a879985 | July 14, 2026 | 95% |
| sha256_hash | 5df3d8d157cea2c1e957202eaea1c2dc27279e992828cfd8be931d48f9458d19 | July 14, 2026 | 95% |
| sha1_hash | 59a4d0464a5bc0d3b588aee5192e40003841abd4 | July 14, 2026 | 95% |
| ip:port | 104.239.66.185:7004 | July 14, 2026 | 75% |
Related content