ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://eyecos.ga/kung/gate.php.

Database Entry


IOC ID:7863
IOC: http://eyecos.ga/kung/gate.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is elevated (75%)
First seen:2021-04-13 05:50:16 UTC
Last seen:2023-02-21 06:49:38 UTC
UUID:1f672966-9c1c-11eb-858b-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:LokiBot
Reference: https://bazaar.abuse.ch/sample/b8d03f6a71e98f8676bed369dae74648dc3e9708e8f34ed7d95dc56ce202bf89/

Avatar
abuse_ch
lokibot (aka Loki,LokiPWS,LokiBot) botnet C2

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2021-04-16 14:30:15 16adf874a7e5757b26b6679428f4a20fc06b73f08ef776161e44bdd9e64ffb33
2021-04-16 03:20:41 3acdd13ae0b7a4e42a3affdeb83afa699b3ebdf82c672dfbe7e41488b450f500