Skip to main content

N-W0rm

Malware Family

289 indicators of compromise attributed to N-W0rm across abuse.ch threat intelligence feeds.

Domains

0

IPs

10

URLs

0

Hashes

279

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&C

Sample indicators

IndicatorType
157.20.182.20ip
178.66.70.14ip
188.32.41.18ip
134.122.204.241ip
161.248.15.167ip
107.172.135.18ip
20.9.134.18ip
5.128.28.134ip
103.8.27.52ip
131.123.38.25ip
d75c9d4be8e7c01012b95bcd0378a9540333b9deceb56904af353d9a53344cc7hash
34e8f89b08f8eb1ed0a72f0cc584bcc816ed56338ec8164c9f303fb53bb89cf5hash
bb30308f54b238b75cef3947d8356244ab0db66c7e9ac269c1f06393410a57d7hash
e93ea2c9e689a35ef77e597a4cf34409f9c02dd74790716eae060304995d6289hash
ba9eb3c1f2bd625039366009e6b764353bf52ec388a9816aed97bd71971bcf3bhash
00b346f6bb81073fd566fc600562e18c8aa37c3f7778025f4c61e5e7d19afee5hash
5e80077607f2345cc1c874a9e49b54bf923bb2d52a58bcf7ac3ca22fc8539f4bhash
d074c74b09cb7d64c8647b8da0adeea4293db6abd5d0ae4202cef511252acf1bhash
4565781cfa213607aa0d588088aceb266138240ff214ced3fe3b62b97d86d1a0hash
2fb5445ec82a0e6ad9201ea0a41486272d4643459a22bc91591852117f172b56hash
e619a4c3b283514f6fec91b45659f766050d86117cbd75752096b719fb444b69hash
2e3726cfe4faa95d2a007d102286ab4ec3da9368e13aa5cf66e2af314183ce24hash
b48372b694840f2e042a0ed009bf134c33a7bab3e5041a61dd9119e676169be4hash
f6dddb9ef4030810b65dd4523449697042412ea1c3b231f29711a8e2eb06f204hash
c617b9b4c5f88d8a852f2d9ac41462074e9a8ab8af0f5592bd2365573f295b1ehash
604d74771e04b36b54d5dba085da04a6a45f9c0138618576edc5a063ba5a36f6hash
e700d9c14903adf9a197c4264b53dd06ec47375de4b07b50df49a97052119930hash
66db6bba6cd5a20a84720a71783077ed39830a52b6231ee42508a17805899d80hash
c2bdddb56dd15b84a41b300ebc0801750e942edf7561357a89ef9616d4b2520bhash
5c6e18c1230a3f7f1c5e2d3ac6ef26155bb7ee844b566eebe6cad5a77fee0270hash

Another file to check? Run a file hash reputation check.