ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://sempersim.su/gg12/fre.php.

Database Entry


IOC ID:614421
IOC: http://sempersim.su/gg12/fre.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is high (100%)
First seen:2022-05-20 13:32:27 UTC
Last seen:never
UUID:4a5d2af4-d841-11ec-ae87-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Loki

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-05-20 13:32:33 87ff199a7b223eb9ea6d24df439a4d65c28350bcb99b0f2694c33dbedc0046cf
2022-05-20 13:32:30 692704ea1178102b991d87a95bd169434ee68c687863e012351ffed523e075b5