Vjw0rm

Malware Family

1 511 indicators of compromise attributed to Vjw0rm across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

1 471

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (22)IPs (16)URLs (2)Hashes (1 471)

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

Indicator	Type
fiscalnotificacionmunicipal.store	domain
fundacionolipica.store	domain
notificadorlocalsolionesfis.store	domain
www.remicionesexternas.store	domain
www.firmaprincipal.store	domain
comidarapidas.store	domain
solicitudelarchivo.store	domain
calzadoswer.store	domain
cominiucadosinternos.store	domain
notificacionesnacionales.store	domain
cpantalonesnegro.store	domain
bpadellcali.store	domain
detalleselparaiso.store	domain
solucionesfiscales.store	domain
colombiajudiciales.store	domain
solicitudesinternas.store	domain
comunicacioones.store	domain
hostphpwindowsappsconecting.ydns.eu	domain
notificacionesfiscalescol.github.io	domain
mastermrc2.kozow.com	domain
91.92.47.41	ip
46.246.14.13	ip
46.246.4.9	ip
46.246.84.8	ip
124.198.132.188	ip
158.173.51.23	ip
157.173.124.50	ip
45.92.1.172	ip
194.26.192.56	ip
158.173.51.22	ip
193.181.46.11	ip
45.83.31.31	ip
46.246.86.10	ip
2.224.144.191	ip
178.73.192.10	ip
46.246.6.66	ip
http://kingspy.dynv6.net:797/Vre	url
http://love.negro.ink:1994/Vre	url
176b5071201599faf37b23fa343983519eaa2a65044ff7849903ca758d7a2fb2	hash
19c2b2552b72e578804e41f698eb760655ec2826fc42fe365eb1bd5b7e1ce38b	hash
c1c242402b2a89f84fe0062b56c3dab6505fffdd23efde258dcce8a3ede90c61	hash
f0c9ebb3fe8c2f512cc128fbbbb82787b4dfbd392ec85bdc9c004b66dff9aae3	hash
3fcbe89b69925446e12a4be89c67ecf099382aafe4dda15558c83933532df7c1	hash
899926e3e3832bf11a49ae07c8e1d40422de17b8afa4b6bccfb6e0d6c21fe8d4	hash
ccfaa79a104470403d9a10a38f44afab9a5038860d32505f66cf891a02c3e804	hash
c3e72d149e6ee949a7118dec62a17b6a8513d244cf593381fbaca3890f64e6d7	hash
a0362be648ebb92266bb64410e429350aefbddb0af74d7e89bea23cfbe75aa64	hash
9e08b5396987899e20119e6baa726653c3e03c85772e5f07a71b586338d6e110	hash
ce8e23a1309e4fbe54a48d36c5c68af97df72073acce4a930df3246a34a75f32	hash
b9ebd12b54350ca3a1f8909107cbce9e4cdbff8a114ef755b20e9acb64bf7244	hash
ae64d93368bda8560f4cc393f48279997027ec39cf8751bc0f433d7e2a63cbf6	hash
2d65bf7afe0afef1847ec7283f937d6dedb174ae03046bb0a5233fedc538a6d3	hash
e213b03bb6a8286d026918fbb9bb31a7882e0ee130a469801e53a78c46017c17	hash
410a7f406af3ce89f468bec2eefc1de50f424344019a5395d3b9e2d9429d2c94	hash
b6e0c17a224fe0df6f58add122e0420aad76a697c1d7634aa0cfe2f5dc84dc2b	hash
2728046252ad3c86171dd3980e419e3f18c4277848c7a8ca106d8fb15b8bbd7f	hash
f450197d283e536a7c22a3d884f50535ddee7f4ed5ce94b8571809db4395fe95	hash
acbd5ccfb8d60783405dd96a626ef0f1752b1676fbe813e1b95a592229598a49	hash

Another file to check? Run a file hash reputation check.