ThreatFox IOC Database
You are viewing the ThreatFox database entry for url http://lokingworldkapitaling.autos:8080/updater?for=5120D3FEDD36EAC912DB54C863CE59BB.
Database Entry
| IOC ID: | 1598982 |
|---|---|
| IOC: | http://lokingworldkapitaling.autos:8080/updater?for=5120D3FEDD36EAC912DB54C863CE59BB |
| IOC Type : | url |
| Threat Type : | botnet_cc |
| Malware: | Unknown malware |
| Confidence Level : | Confidence level is high (100%) |
| ASN: | AS61272 IST-AS |
| Country: |  LT |
| First seen: | 2025-09-23 13:25:09 UTC |
| Last seen: | never |
| UUID: | ba350fac-9880-11f0-bfa6-42010aa4000a |
| Reporter |  abuse_ch |
| Reward | 5 credits from ThreatFox |
| Tags: | GoProxy |
Malware Samples
The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).
| Time stamp (UTC) | SHA256 hash | Bazaar |
|---|---|---|
| 2025-09-23 13:30:14 | 22ae13fc1d21ebc4318bd2877ffb4d0c8c059c4bc854cc00c6cbeac802effa6e |