Lokibot_IOCs_2020-06-18_00_05.txt

#Lokibot #malware #OSINT #IOC


SHA256:
195a93f95cb67c7a9dec944517dadba693262322afef87c9db7ae1ce5dd13f45
296e6609c5ff7200a36b12fcad2f74a03e82b2a90055a9bcb4f2f9eefab5878a
2b216fc0d90426beaf69ebe7effce88f58110f038a55c144f001c9a2a6b8bba6
5d36df505d7b0a1c901f66ca396b1ec835ad83065122579793d15a186c93f691
f783c291a3ebfba359e94ab0b86148350a54bc2d95878fa15abfd4b162b08d61

IPs:
104[.]223[.]170[.]102
178[.]62[.]14[.]31
185[.]159[.]153[.]117
194[.]180[.]224[.]87

Domains:
beheshtsoft[.]com
crogtrt[.]com
mecharnise[.]ir

URL:
http://104[.]223[.]170[.]102/typour/Panel/five/fre[.]php
http://beheshtsoft[.]com/support/bn/fre[.]php
http://crogtrt[.]com/rozay/pin[.]php
http://mecharnise[.]ir/da19/fre[.]php
http://mecharnise[.]ir/da20/fre[.]php