● Malware

xCaon

xCaon is an HTTP variant of the BoxCaon malware family that has used by IndigoZebra since at least 2014. xCaon has been used to target political entities in Central Asia, including Kyrgyzstan and Uzbekistan.

View graph Watch Export

Indicators tracked

Intelligence Reports20

20 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

12 relationships

T1132.001: Standard Encoding

source

T1547: Boot or Logon Autostart Execution

source

T1573.001: Symmetric Cryptography

source

T1106: Native API

source

T1005: Data from Local System

source

T1140: Deobfuscate/Decode Files or Information

source

T1016: System Network Configuration Discovery

source

T1518.001: Security Software Discovery

source

T1059.003: Windows Command Shell

source

T1071.001: Web Protocols

source

T1105: Ingress Tool Transfer

source