IOC LOOKUP
// SEARCH IP, DOMAIN, HASH, OR URL AGAINST OTX THREAT INTELLIGENCE
Indicator of Compromise Search
Bulk Lookup
✦ IPv4 Address ✦ Domain ✦ MD5/SHA1/SHA256 Hash ✦ URL
INDICATOR
worm.ws
Domain ⚠ 50 PULSE HITS
↓ CSV ↓ JSON
40
/100
MEDIUM
CONFIDENCE LEVEL
THREAT CONFIDENCE ANALYSIS
MEDIUM 40/100 confidence
Some evidence of suspicious activity. Further investigation recommended before action.
CLEAN LOW MED HIGH CRIT
0 25 50 75 100
OTX
30/30
50 pulses
VIRUSTOTAL
—/35
N/A
ABUSEIPDB
—/25
IPv4 only
URLHAUS
10/10
LISTED
General Information
Indicatorworm.ws
Whois Domainhttp://whois.domaintools.com/worm.ws
Typedomain
AlienVault OTX Analysis ↗ View on OTX
50
PULSE HITS
Pulse Hits 50
Indicator Type Domain
Threat Level
ASSOCIATED PULSES
PULSE NAMEDATE
IOC Records Provided by @NextRayAI 2022-10-11
Nemucod - Malware Domain Feed V2 2019-04-29
Phorpiex - Malware Domain Feed V2 2020-06-05
Nemucod - Malware Domain Feed V2 2020-05-05
Phorpiex - Malware Domain Feed V2 2019-04-24
VirusTotal Analysis ↗ View on VirusTotal
⚠ VirusTotal rate limit reached. Try again shortly.
URLhaus (abuse.ch) ↗ View on URLhaus
⚠ LISTED
URLHAUS
URLs Found 3
ASSOCIATED URLs
URL STATUS / TYPE DATE
http://worm.ws:8080/winsysdrv.exe offline 2020-11-05
http://worm.ws/avv.exe offline 2020-10-25
http://worm.ws/32.exe offline 2020-09-29