ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://tqe2009.com/alex/five/fre.php.

Database Entry


IOC ID:1874298
IOC: http://tqe2009.com/alex/five/fre.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS16509 AMAZON-02
Country:- US
First seen:2026-08-14 08:20:04 UTC
Last seen:never
UUID:f3f01e03-97b8-11f1-8a3d-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Loki

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2026-08-14 09:30:08 3267c5a04e1045b54b4518ec51b2267c0e5dd88dc6f33bef709604301d219c73
2026-08-14 08:20:07 595de5b4652a6cb3743d44a3de3548d0efd879c7272d4f4bbdf4942b53bafd0e