ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://46.183.222.162/bcxgfhgsf/Panel/five/fre.php.

Database Entry


IOC ID:1395355
IOC: http://46.183.222.162/bcxgfhgsf/Panel/five/fre.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is high (100%)
ASN:AS52048 RixHost
Country:- EE
First seen:2025-01-28 11:20:13 UTC
Last seen:never
UUID:d7e6904e-dd69-11ef-a65d-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Loki

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-01-28 11:25:15 e70b780a4e98503745b72ba33f45812c75d27d88bbeb58ce4feba484c016e14e
2025-01-28 11:20:15 a9f6314789b922b612cf971c0e7dfcfa758b7f192827b1b6304e8e6c90029c22