ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://sempersim.su/gk7/fre.php.

Database Entry


IOC ID:847920
IOC: http://sempersim.su/gk7/fre.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is high (100%)
First seen:2022-09-05 13:45:37 UTC
Last seen:never
UUID:05dc1422-2d21-11ed-ae73-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Loki

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-09-06 12:55:09 99b4d24066379d58596752045dcb9f88cf184c7752fe571d9181f1e9ce7c3b86
2022-09-05 13:45:39 0d67e3050c9f62fdc648ffc24d1ec6303b2d2b8488410dcb89abd05985bc5af6