🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://parsegitim.com/wp-hybrid/five/five/fre.php.

Database Entry


IOC ID:56879
IOC: https://parsegitim.com/wp-hybrid/five/five/fre.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
First seen:2021-05-22 05:55:24 UTC
Last seen:never
UUID:4d03afba-bac2-11eb-b17b-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:LokiBot
Reference: https://bazaar.abuse.ch/sample/fff6e163092c06598e0ded6bda9293a79a01c2b156c16918f240666c78749e6f/

Avatar
abuse_ch
lokibot (aka Loki,LokiPWS,LokiBot) botnet C2