ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://eneos.com.tw/includes/imt/fre.php.

Database Entry


IOC ID:165495
IOC: http://eneos.com.tw/includes/imt/fre.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is high (100%)
First seen:2021-08-03 06:21:03 UTC
Last seen:never
UUID:facf430b-f422-11eb-830d-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Loki

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-08-03 11:46:08 dc22feb35cf38c969ce024363e6af1c621d3ca38de0055aa6361a00f87638f8c
2021-08-03 06:21:06 81a4aaff9520803ff6cb7f1100024e0c2bc40750c05290f53c5e01b5cff6a59c