Discovery Enum
- AdFind
- Bloodhound
- PowerView
- ShareFinder
Ransomware group
XingLocker
XingLocker is a ransomware family referenced in reporting on IcedID-delivered ransomware activity.
Profile source: Mallory opens in a new tabXingLocker
Family profile
XingLocker is a ransomware family referenced in reporting on IcedID-delivered ransomware activity. The provided content states that IcedID was used to deliver XingLocker ransomware, and that XingLocker later rebranded as Quantum. It is also mentioned in the context of Conti-linked activity, specifically that IcedID had previously been used to deliver ransomware from XingLocker/Quantum and from Conti groups. High-confidence details in the provided content are limited to this delivery-chain and rebranding relationship; no additional capabilities, victimology, platform specifics, or indicators of compromise for XingLocker itself are directly provided.
Ransomware.live
Operational record
Offsec
- Cobalt Strike
Reporting
Research mentioning XingLocker
May 2
Splunk Research
Detection: Disable Defender MpEngine Registry | Splunk Security Content
References https://thedfirreport.com/2021/10/18/icedid-to-xinglocker-ransomware-in-24-hours/
Jan 20
Bleeping Computer
Researchers link 3AM ransomware to Conti, Royal cybercrime gangs
Previously, IcedID was used to deliver ransomware from XingLocker, which rebranded as Quantum...
