ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://peacezoneflow.ydns.eu/myuvjsbkjd/Panel/five/fre.php.

Database Entry


IOC ID:1663480
IOC: http://peacezoneflow.ydns.eu/myuvjsbkjd/Panel/five/fre.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is high (100%)
ASN:AS60223 NETIFACE-AS
Country:- GB
First seen:2025-11-30 10:50:04 UTC
Last seen:never
UUID:542a464c-cdda-11f0-a341-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Loki

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-12-01 05:40:11 96502cd36566576fd7ca157915684fd5c826364b31eb51bb57dda50f51819374
2025-12-01 05:20:07 32a52586e742cb7d213b9eb5b2c6038f26d8c647a092ee8b23ff2fb94deaff57
2025-12-01 03:35:09 7a97229ab5c1e0fb376635abfa1c2833344b326b5e00d01be978c9cc1d7d263e
2025-12-01 01:50:08 cbf238a9bec97b767fe53b13949f5acbaa30c40692216e9628f5f71842c60889
2025-11-30 10:50:07 f28cf429577df40ee009456ceb258dab612fa00502236d4fd3aa5fe9343a1084