ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://ddbrawijaya.com/xx/fre.php.

Database Entry


IOC ID:73624
IOC: http://ddbrawijaya.com/xx/fre.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is high (100%)
Is compromised? : False
First seen:2021-06-08 07:04:16 UTC
Last seen:never
UUID:bd2d6d3f-c827-11eb-b17b-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Loki

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-06-08 11:50:24 dc134764bb9eca9818ce764d9a4f04b75e8a99a00df3367b611737c00b4019b1
2021-06-08 07:04:19 7ee80f1bd9d9807214be06becc140db328268b317aea2daea14e63753c93b1b5