xPack (Malware Family)
By Fraunhofer FKIE
Archived: 2026-04-05 15:03:01 UTC
xPack
aka: NERAPACK
Actor(s): Antlion, Pirate Panda
Symantec describes this as a decryptor/loader used by Chinese threat actor Antlion in campaigns targeting Taiwan.
References
Yara Rules
[TLP:WHITE] win_xpack_w0 (20220207 | No description)
[TLP:WHITE] win_xpack_w1 (20220207 | No description)
Download all Yara Rules
Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.xpack
https://malpedia.caad.fkie.fraunhofer.de/details/win.xpack
Page 1 of 1