XWorm

Malware Family

110 indicators of compromise attributed to XWorm across abuse.ch threat intelligence feeds.

Domains

14

IPs

65

URLs

2

Hashes

29

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

laohe4.myvnc.comdomainbimqut238p64emywajhvaw==domainfrbvnnnfyr6xr622pbe0nq==domainogonna.ydns.eudomaineminley.ydns.eudomaindemagic009.duckdns.orgdomainaibot.casacam.netdomainwatchthisyear.gotdns.chdomainlaohen1.myvnc.comdomainbiesmanscars.bizdomaincurrentpi021.duckdns.orgdomainsourcingallproductsworldwide.duckdns.orgdomainultraportal.4nmn.comdomainnetwork000.ddns.netdomain130.12.181.11ip94.159.113.64ip176.65.139.46ip194.116.236.7ip87.120.107.29ip31.56.209.126ip151.244.232.26ip104.239.66.136ip94.154.32.163ip195.177.94.56ip172.245.106.54ip155.103.71.244ip104.239.66.11ip185.194.175.132ip104.239.66.42ip198.37.105.48ip217.60.195.172ip217.217.97.75ip107.173.143.20ip194.116.236.94iphttp://94.159.113.64/a.jpgurlhttp://94.159.113.64/b.jpgurleb185ca03b1309eb280e66a53545ef8e899c90ebdbd7897c05c11fa9ae3d7dd2hash3142ab1bd28b53bb14e4b5edd918c734a2bcdceee81e76b44444d548a93abcb6hash12a7502e951fa4922df01a8d69f6dd4a19bbcfa0c0b421ce92888ced54611e3fhash074e4567fbe1d97669b64d9fec23678ebbd27633812b37ae3b64271aa2546ba2hashd9e0461524386292212444734e44619ehash6a0bf1dba11b61b4b53e78ccb483a7aea4ec3cfa81d2e7f9de55376c9fdef7echash6a26cc31650fd8ca3d62532cd1106899hash7776706d26fb2dfd7cb96910810bb4c3a02b343a228035a0ca4db3ccf8e4d26ahashf04c0953e5169beb168fd9ebcba96ce5d2d38a92hashffa6334625c7613e5a3b8817c742e43a2e9447fcaae7305e3eeaf0be5eb4ea70hashd9d6fc3085dd822f258601164ecb21f318822a63ca0360aead9201bcee49ed04hash96f4bf9096686fcb2cd171034b9ea22cd4da2280hash4b3c6ee4490da28af2ec40637384c400hashc4785f0696cae4e8630d28e545bbee207544e7e3hash6e66f889923ccb7dc34641a4d7ddc234hash7ee796a8fef94d38a6ef3d906fe3d37052b5b6c2435420dcc75e459fbc501a68hash15585c70f6dc9bfb5a73d8a70766c63355997ddahash4faa4dc2ba332b3ea09ce2e4480e9663hashaecbad9bc246f34850ea7eb99a879985hash5df3d8d157cea2c1e957202eaea1c2dc27279e992828cfd8be931d48f9458d19hash