[Download XWorm_v31_Updated.yar from the Threat Intel repo – Hyperlink redacted for article length ]
Unexpected entries in HKCU\Software\Microsoft\Windows\CurrentVersion\Run referencing unusual .exe files in the %AppData% or %Temp% directories. xworm v31 updated
Detail the specific for the recent XWorm campaign. [Download XWorm_v31_Updated