ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://wordpressobsessed.net/wp-admin/five/fre.php.

Database Entry


IOC ID:48191
IOC: http://wordpressobsessed.net/wp-admin/five/fre.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is high (100%)
ASN:AS133618 TRELLIAN-AS-AP
Country:- AU
First seen:2021-05-19 02:30:31 UTC
Last seen:never
UUID:2e711af1-b84a-11eb-b17b-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Loki

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-05-19 03:05:31 242e697ace9bd90885566ecaaeb929569dc61217f9e01b190f764e89e77c8b16
2021-05-19 02:30:33 59653f2c5630242b3d29eece0a082cb9bcf2a81fed170e3c9a2cbfc50ade86d3