ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://sempersim.su/d10/fre.php.

Database Entry


IOC ID:1277175
IOC: http://sempersim.su/d10/fre.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is high (100%)
Is compromised? : False
First seen:2024-05-30 14:10:16 UTC
Last seen:never
UUID:56d6a1e9-1e8e-11ef-a571-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Loki

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2024-05-31 08:35:07 12aee4a37e5f760d7d3956b9c3971c178a12306c5f4f3e2a13ae713c4b6e2bb8
2024-05-30 14:10:18 3b0af3f5146f9d1461b10e6535dc47bea08ae7f8f728542aaba25e5cc8d914e0