Indicator of Compromise
Medium URL Active
Value
https://enterprise-platform-2024.s3.eu-central-1.amazonaws.com/K7ZlacwLjUu?ID=avmkZCiR5CMpCjU
Association

XWorm

Tags
urlscan xworm
Description

payload_delivery

First Seen

November 16, 2025 18:52

Last Seen

Unknown

Created

April 29, 2026 14:29

Last Updated

April 29, 2026 14:29

Additional Metadata
{'anonymous': '0',
 'confidence_level': 50,
 'crawled_at': '2026-04-29T14:29:01.929892+00:00',
 'malware': 'win.xworm',
 'malware_alias': None,
 'malware_printable': 'XWorm',
 'original_value': None,
 'reference': 'https://urlscan.io/result/019a8e03-020f-7338-ade1-3ea0fa071783',
 'reporter': 'juroots',
 'source': 'threatfox-abuse-ch',
 'tags': ['urlscan', 'xworm'],
 'threat_type': 'payload_delivery',
 'threatfox_id': '1644395'}
STIX Data
{'description': 'payload_delivery',
 'external_references': [{'external_id': '1644395',
                          'source_name': 'threatfox-abuse-ch',
                          'url': 'https://threatfox.abuse.ch/ioc/1644395/'}],
 'id': 'indicator--1644395',
 'name': 'URL: '
         'https://enterprise-platform-2024.s3.eu-central-1.amazonaws.com/K7ZlacwLjUu?ID=avmkZCiR5CMpCjU',
 'pattern': '[URL:value = '
            "'https://enterprise-platform-2024.s3.eu-central-1.amazonaws.com/K7ZlacwLjUu?ID=avmkZCiR5CMpCjU']",
 'pattern_type': 'stix',
 'pattern_version': '2.1',
 'type': 'indicator',
 'valid_from': '2025-11-16 18:52:33',
 'valid_until': None}
Quick Actions
Edit IOC Update from Web