Skip to main content

Vjw0rm

Malware Family

1 511 indicators of compromise attributed to Vjw0rm across abuse.ch threat intelligence feeds.

Domains

22

IPs

16

URLs

2

Hashes

1 471

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
fiscalnotificacionmunicipal.storedomain
fundacionolipica.storedomain
notificadorlocalsolionesfis.storedomain
www.remicionesexternas.storedomain
www.firmaprincipal.storedomain
solicitudelarchivo.storedomain
calzadoswer.storedomain
cominiucadosinternos.storedomain
notificacionesnacionales.storedomain
cpantalonesnegro.storedomain
etiendasb.storedomain
bpadellcali.storedomain
solucionesfiscales.storedomain
colombiajudiciales.storedomain
solicitudesinternas.storedomain
comunicacioones.storedomain
ccleanerupdate.mysynology.netdomain
hostphpwindowsappsconecting.ydns.eudomain
notificacionesfiscalescol.github.iodomain
mastermrc2.kozow.comdomain
91.92.47.41ip
46.246.14.13ip
46.246.4.9ip
46.246.84.8ip
124.198.132.188ip
158.173.51.23ip
157.173.124.50ip
45.92.1.172ip
194.26.192.56ip
158.173.51.22ip
193.181.46.11ip
45.83.31.31ip
46.246.86.10ip
2.224.144.191ip
178.73.192.10ip
46.246.6.66ip
http://kingspy.dynv6.net:797/Vreurl
http://love.negro.ink:1994/Vreurl
25c8423d5f1652eaeec4a8faf0347147af18f1894b368d872d4854297f416c4chash
70f6448c7123a3fdfeeea3f8a1bff79b749f622c9d1a5b6542e0cafc6e6372cehash
00d06a10be5d547f7ef90e63112e697d10c12729fef41cdfba874368612d7c46hash
929232555bcc80211ffb2cdc880848284bd2be08f0b14f2a3348cb7bad7c32c3hash
46af67f4a2a2c3d7bc6d8743941718c5abd1f3cacb0dd08f9a4c24651a843752hash
c448671837087699ae4c2fcd35e1958a9d55282120dc6e7bf767c6a032a6e4ebhash
cae46be02334e11865672820d55bddc09d0e546c3332a588ae6eea82437de406hash
ac02025c5e884ff1cb4668de5da9cc81625f13db5f1e12d05a0a47c9746fd017hash
080069323805f67a898f62517b17786d46cc51e9894cd490ee0ba789271e1d9chash
63bca571548f7d4b53522b9c39667baf14a6341c299960098c508dfb55697ac7hash
67a577db60b011be196c1ac971a8e68c3cfa49df9e16319b4480c81011e23ff5hash
60c0ecb470e4c5b8f985db4eef3775842081eec19ff3468f3c751b61bc44cecbhash
9c632ee7c28c6a5e9a90a7c36eedfa7218e359d88fb3ced77520b9ef6e02456ahash
786b63ecc1fb8174eb1301a5498ba858ccac1978cb745afde8c8cd22c7c962afhash
172529bd741886c8380b08886e44cd7d0541e8af7c6199347d0d0cf9c479b053hash
d7752e8e010fa4541f3193ff1df7243eabcb863e5d76272972562601a825b515hash
4f828112fa40035776e561bd08b71eb2073adb63e890642c6f91cc3b3cb60119hash
2e0f76b60d0374094c685eca1e37895a7307df72ab16d4bb552911a21b6a36cdhash
b2cfb719020e4c18fe7978bdf369e5c1fae69dd83260308747c608f4bdd8ecdbhash
4641938e57106fd29330fd3584c3a67646c4084a71176a54f25cef0feee6caa9hash

Another file to check? Run a file hash reputation check.