XWorm

Malware Family

114 indicators of compromise attributed to XWorm across abuse.ch threat intelligence feeds.

Domains

12

IPs

71

URLs

2

Hashes

29

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

laohe4.myvnc.comdomainogonna.ydns.eudomaineminley.ydns.eudomaindemagic009.duckdns.orgdomainaibot.casacam.netdomainwatchthisyear.gotdns.chdomainlaohen1.myvnc.comdomainbiesmanscars.bizdomaincurrentpi021.duckdns.orgdomainsourcingallproductsworldwide.duckdns.orgdomainultraportal.4nmn.comdomainnetwork000.ddns.netdomain94.159.113.64ip176.65.139.46ip67.207.166.167ip192.3.171.223ip84.38.129.122ip216.250.250.247ip151.244.232.26ip89.40.31.72ip155.103.71.244ip38.240.51.74ip193.104.58.63ip94.154.32.52ip185.194.175.132ip217.60.195.172ip172.245.244.91ip107.173.143.20ip217.60.195.213ip102.220.160.143ip217.60.195.17ip109.248.150.244iphttp://94.159.113.64/a.jpgurlhttp://94.159.113.64/b.jpgurl37b0e82941af3a9c12e09991411d1b037b9dc516c99a447f1929039f6648d34fhasheb185ca03b1309eb280e66a53545ef8e899c90ebdbd7897c05c11fa9ae3d7dd2hash074e4567fbe1d97669b64d9fec23678ebbd27633812b37ae3b64271aa2546ba2hashd9e0461524386292212444734e44619ehash8b0954a8e13c1086945b93e9e967786e86bd0f2ahash7776706d26fb2dfd7cb96910810bb4c3a02b343a228035a0ca4db3ccf8e4d26ahashf04c0953e5169beb168fd9ebcba96ce5d2d38a92hashffa6334625c7613e5a3b8817c742e43a2e9447fcaae7305e3eeaf0be5eb4ea70hash4b3c6ee4490da28af2ec40637384c400hash6e66f889923ccb7dc34641a4d7ddc234hash7ee796a8fef94d38a6ef3d906fe3d37052b5b6c2435420dcc75e459fbc501a68hash19d6b52e50a865b56f34724d77af88b87e065c179d91ea6614d7e36ce1370216hash15585c70f6dc9bfb5a73d8a70766c63355997ddahasha36374b54d03e24d666466928d208624hash4faa4dc2ba332b3ea09ce2e4480e9663hash0251d469d95ad1bde34b0ab228dfff4ee2bdff73f0612e6bc481667c757596cfhashbc7d674aa2dbd5aab2e00b85f536681b766441a1hashaecbad9bc246f34850ea7eb99a879985hash5df3d8d157cea2c1e957202eaea1c2dc27279e992828cfd8be931d48f9458d19hash59a4d0464a5bc0d3b588aee5192e40003841abd4hash