Lokibot_IOCs_2020-11-05_13_33.txt

#Lokibot #malware #OSINT #IOC

SHA256:
4bc7b8fded24a280c35ebce0b4cecc83725e655ed1c983a5e8ac10e29aabd379
5fa925873a51c4c5ab5fbecc2796a90dcbd8bc564376a265e61444d1c6d04796
8cd5b74e558ebd50c6529a9d8c0075aba067e6867f99a90a8152979f69ad9f68

IPs:
91[.]203[.]193[.]242

Domains:
crestmart[.]ga
kregmartlime[.]ga
magicview[.]ga

URL:
http://crestmart[.]ga/main/config/emma/temp[.]php
http://crestmart[.]ga/main/config/US/temp[.]php
http://kregmartlime[.]ga/main/ex/ap1/vbc[.]exe
http://kregmartlime[.]ga/main/ex/us8/vbc[.]exe
http://magicview[.]ga/akin/gate[.]php

#Lokibot #malware #OSINT #IOC