an information stealer that communicates with an IP address (193.143.1[.]205) for C2. Last but not least, WeaXor ransomware artifacts – a revised version of Mallox – have been found contacting a C2 ...