ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://brokenskulltechnologies.tk/BN1/fre.php.

Database Entry


IOC ID:390298
IOC: http://brokenskulltechnologies.tk/BN1/fre.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is elevated (75%)
First seen:2022-02-23 11:46:21 UTC
Last seen:never
UUID:38c3c4ea-949e-11ec-a022-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:LokiBot
Reference: https://bazaar.abuse.ch/sample/629cab6f60e0d2f625c3a8c8784407f43f834bce86c1c27ae443e6aed7ec3062/

Avatar
abuse_ch
lokibot (aka Burkina,Loki,LokiBot,LokiPWS) botnet C2

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-02-24 08:35:38 b4aa7f42c90ef0d7aeb8e471510c20a1ef364ac16aa07ecfbbb80335a84d2db7
2022-02-23 13:07:06 1960cdd2c85eb563f15831012f4afe994ed4da25091b6d89b81563d5217a4484