ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://duclongetc.com/vvvv/need/work/Panel/five/fre.php.

Database Entry

IOC ID:	1811480
IOC:	http://duclongetc.com/vvvv/need/work/Panel/five/fre.php
IOC Type :	url
Threat Type :	botnet_cc
Malware:	Loki Password Stealer (PWS)
Malware alias:	Burkina, Loki, LokiBot, LokiPWS
Confidence Level :	Confidence level is high (100%)
Is compromised? :	False
ASN:	AS14618 AMAZON-AES
Country:	US
First seen:	2026-05-12 15:45:04 UTC
Last seen:	never
UUID:	8b3b3494-4e19-11f1-b930-42010aa4000a
Reporter	abuse_ch
Reward	5 credits from ThreatFox
Tags:	Loki

Malware Samples

The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).