Malware.md

CleanMX.de

VirusWatch Watching adress changes of Malware Url's

Malware

This database consists of Virus URI, collected and verified since Feb 2006.

URL

• Website

• http://support.clean-mx.de/clean-mx/viruses.php

• Source

• http://support.clean-mx.de/clean-mx/xmlviruses?response=alive&format=csv&domain=

• Data

• URL, Domain Name, IP Address, ASN, Country Code, Contact Mail, etc.

• Format

• Text

• API/Token

• None

• Status

• Ok

• Comments

• Drop a mail to mailto:"abuse@clean-mx.de" get data

Sample Output of IntelMQ

{
  "malware": {
    "name": "worm.win32.autoit"
  },
  "source": {
    "asn": 10103,
    "ip": "202.77.59.48",
    "abuse_contact": "abuse@hkbn.com.hk",
    "geolocation": {
      "cc": "HK"
    },
    "url": "http:\/\/202.77.59.48\/update1.dlied.qq.com\/lol\/autopatch\/3189\/LOL_V3189_0617123122_15D.exe?mkey=577e0af794dea683&f=6606&c=0&p=.exe"
  },
  "raw": "Zmlyc3R0aW1lLGlkLGxhc3R0aW1lLGRkZXNjcixuczUsbGluZSxpbmV0bnVtLHN1YixuZXRuYW1lLGlwLG5zNCx1cmwsbnMxLGNvdW50cnksc2Nhbm5lcix2aXJ1c25hbWUsbnMyLGVtYWlsLHJlY2VudCxzb3VyY2UsYXMsbnMzLHJlc3BvbnNlLGRvbWFpbixyZXZpZXc=",
  "classification": {
    "type": "malware"
  },
  "feed": {
    "url": "http:\/\/support.clean-mx.de\/clean-mx\/xmlviruses?response=alive&format=csv&domain=",
    "name": "CleanMX",
    "accuracy": 100
  },
  "time": {
    "observation": "2016-07-07T12:09:04+00:00",
    "source": "2016-07-07T14:43:37+00:00"
  }
}