ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://creeksfoako.sytes.net/okgjhghp/Panel/five/fre.php.

Database Entry


IOC ID:379260
IOC: http://creeksfoako.sytes.net/okgjhghp/Panel/five/fre.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is high (100%)
First seen:2022-02-04 07:01:05 UTC
Last seen:never
UUID:38c64bbb-8588-11ec-a022-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Loki

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-02-06 08:32:59 226262818c0fd5e68a389d14363d62c516deb9dce90ec32c8db522071c743940
2022-02-04 13:20:26 0b7ca3280540f9648f1ea4ca26bc51e079b65523339881b9fa75e220850ecbb2
2022-02-04 10:37:33 86878e85917c3e68a46b1ca8225b72bdbd46d1586b9e55eb879ef7c018e30ca1
2022-02-04 07:01:08 84252477cc98f1d08f4c8304713a9dfe3a5718fd1b6bde1e6f7a5f17ce4b2a0f