ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://sempersim.su/gj25/fre.php.

Database Entry


IOC ID:846043
IOC: http://sempersim.su/gj25/fre.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is high (100%)
First seen:2022-08-29 06:01:18 UTC
Last seen:never
UUID:ffd9c587-275f-11ed-ae73-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Loki

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-08-29 08:52:06 2d1be32b0d4a38adf54629616c860756cb029e87d1d3652cafe4654f58fb6a9c
2022-08-29 06:01:20 4217ea332893262dcd0914ce0b201451e12bb558bf99b742ec1ccf2008991b24