🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://40.121.49.138:8024/Vre.

Database Entry


IOC ID:226254
IOC: http://40.121.49.138:8024/Vre
IOC Type :url
Threat Type :botnet_cc
Malware: Vjw0rm
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS8075 MICROSOFT-CORP-MSN-AS-BLOCK
Country:- US
First seen:2021-09-24 14:45:36 UTC
Last seen:2021-09-24 18:59:07 UTC
UUID:1442239e-1d46-11ec-830d-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Vjw0rm

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-09-24 16:05:38 8b170e4bb6d2bb08746003c5111ac4125637b20474f4ba381324427c4fc0d76c
2021-09-24 14:45:38 c8d6095c008408ed115d8f6e047fe8339358944e23ac151ec6aecb4aeaacd201