ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://ccjjlogsx.com/uu/me/tc.php.

Database Entry


IOC ID:160687
IOC: http://ccjjlogsx.com/uu/me/tc.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
First seen:2021-07-15 17:12:44 UTC
Last seen:never
UUID:deefcb8a-e58f-11eb-b17b-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:LokiBot
Reference: https://bazaar.abuse.ch/sample/2a8a5b1ec33d374c70c2f3aed21685b4ae66e2291e7e8a2c2cf3cc627bc4023e/

Avatar
abuse_ch
lokibot (aka Loki,LokiPWS,LokiBot) botnet C2

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-07-16 19:20:07 6d84c173246b2d91180e6c992d3faec63a088513411436761dade5c35b7c0ff8
2021-07-15 20:25:42 2a8a5b1ec33d374c70c2f3aed21685b4ae66e2291e7e8a2c2cf3cc627bc4023e