Malware.md

September 26, 2016 ยท View on GitHub

URLVir

URLVir is an online security service developed by NoVirusThanks Company Srl that automatically monitors changes of malicious URLs (executable files).

Malware

Monitor Malicious Executable URLs

Domain Name

  • Website
  • http://www.urlvir.com/
  • Source
  • http://www.urlvir.com/export-hosts/
  • Data
  • Domain Name
  • Format
  • Text
  • API/Token
  • None
  • Status
  • Ok
  • Comments
  • No comment
Sample Output of IntelMQ
{
  "feed":{
    "url":"http://www.urlvir.com/export-ip-addresses/",
    "name":"URLVir",
    "accuracy":100.0
  },
  "raw":"MTAzLjI2Ljk5LjE0Nw==",
  "source":{
    "ip":"103.26.99.147"
  },
  "time":{
    "observation":"2016-07-07T14:57:12+00:00"
  },
  "classification":{
    "type":"malware"
  }
}

IP Address

  • Website
  • http://www.urlvir.com/
  • Source
  • http://www.urlvir.com/export-ip-addresses/
  • Data
  • IP Address
  • Format
  • Text
  • API/Token
  • None
  • Status
  • Ok
  • Comments
  • No comment
Sample Output of IntelMQ
{
  "time":{
    "observation":"2016-07-07T14:55:14+00:00"
  },
  "raw":"aW5kaXJsaXZleHN0b3JlLmNvbQ==",
  "classification":{
    "type":"malware"
  },
  "source":{
    "fqdn":"indirlivexstore.com"
  },
  "feed":{
    "accuracy":100.0,
    "name":"URLVir",
    "url":"http://www.urlvir.com/export-hosts/"
  }
}

There's only Domain information in in http://www.urlvir.com/export-hosts/. It looks like:

################################################################## 
#URLVir Active Malicious Hosts #Updated on August 29, 2016, 4:40 am 
#Free for noncommercial use only, contact us for more information 
################################################################## 
indirlivexstore.com 
smoon.co.kr 
mytnoc.com 
w3.gazi.edu.tr
expoperfumes.com.mx

There's only IP information in http://www.urlvir.com/export-ip-addresses/ It looks like:

##################################################################
#URLVir Active Malicious IP Addresses Hosting Malware #Updated on August 30, 2016, 5:22 am 
#Free for noncommercial use only, contact us for more information 
################################################################## 
115.239.248.50
117.52.31.226 
121.78.246.30