Skip to content

Latest commit

 

History

History
113 lines (98 loc) · 2.24 KB

Malware.md

File metadata and controls

113 lines (98 loc) · 2.24 KB
Raw

URLVir

URLVir is an online security service developed by NoVirusThanks Company Srl that automatically monitors changes of malicious URLs (executable files).

Malware

Monitor Malicious Executable URLs

Domain Name

  • Website
  • http://www.urlvir.com/
  • Source
  • http://www.urlvir.com/export-hosts/
  • Data
  • Domain Name
  • Format
  • Text
  • API/Token
  • None
  • Status
  • Ok
  • Comments
  • No comment
Sample Output of IntelMQ
{
  "feed":{
    "url":"http://www.urlvir.com/export-ip-addresses/",
    "name":"URLVir",
    "accuracy":100.0
  },
  "raw":"MTAzLjI2Ljk5LjE0Nw==",
  "source":{
    "ip":"103.26.99.147"
  },
  "time":{
    "observation":"2016-07-07T14:57:12+00:00"
  },
  "classification":{
    "type":"malware"
  }
}

IP Address

  • Website
  • http://www.urlvir.com/
  • Source
  • http://www.urlvir.com/export-ip-addresses/
  • Data
  • IP Address
  • Format
  • Text
  • API/Token
  • None
  • Status
  • Ok
  • Comments
  • No comment
Sample Output of IntelMQ
{
  "time":{
    "observation":"2016-07-07T14:55:14+00:00"
  },
  "raw":"aW5kaXJsaXZleHN0b3JlLmNvbQ==",
  "classification":{
    "type":"malware"
  },
  "source":{
    "fqdn":"indirlivexstore.com"
  },
  "feed":{
    "accuracy":100.0,
    "name":"URLVir",
    "url":"http://www.urlvir.com/export-hosts/"
  }
}

There's only Domain information in in http://www.urlvir.com/export-hosts/. It looks like:

################################################################## 
#URLVir Active Malicious Hosts #Updated on August 29, 2016, 4:40 am 
#Free for noncommercial use only, contact us for more information 
################################################################## 
indirlivexstore.com 
smoon.co.kr 
mytnoc.com 
w3.gazi.edu.tr
expoperfumes.com.mx

There's only IP information in http://www.urlvir.com/export-ip-addresses/ It looks like:

##################################################################
#URLVir Active Malicious IP Addresses Hosting Malware #Updated on August 30, 2016, 5:22 am 
#Free for noncommercial use only, contact us for more information 
################################################################## 
115.239.248.50
117.52.31.226 
121.78.246.30