ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://91.223.82.29/~septt165/francob/fred.php.

Database Entry


IOC ID:851176
IOC: http://91.223.82.29/~septt165/francob/fred.php
IOC Type :url
Threat Type :botnet_cc
Malware: Loki Password Stealer (PWS)
Malware alias:Burkina, Loki, LokiBot, LokiPWS
Confidence Level : Confidence level is high (100%)
First seen:2022-09-22 21:50:53 UTC
Last seen:never
UUID:a1475a45-3ac0-11ed-ae73-42010aa4000a
Reporter @abuse_ch
Reward 5 credits from ThreatFox
Tags:Loki

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-09-22 21:51:25 585f3ded320a0789bb38add5f781070fc1959bbba7e46f1b9c39545398b42130