Lokibot_IOCs_2020-10-14_13_52.txt

#Lokibot #malware #OSINT #IOC

SHA256:
24adc1388e424cdc4dbd6d31c148f669694dfa4d20a5fbec0d4c83c7b6ac0bc7
35d497ad14cfad508d3f7420bb3f74602884a57673444ba62119286a5d3acf98
36bfe5d83b4e22641d73f8998a96a1790b006415803a51d4ac05af7a1471ad04
4d72013a489d7d649f7775c7d38d93a6a21f92c59dd6dfd8830dc9c4335d4f79
9ea0a6b41f8a279c73b9ad878f80f7a1549b0e5b65cb1f6d5dbb3f0893ddebe1
bee17c10f6ae2b3d19cc7cdd1e54f11a9aac44cda0b5d6f41c0dbdce69b79ad5

IPs:
150[.]109[.]93[.]89
192[.]236[.]178[.]210

Domains:
crestmart[.]ga

URL:
http://192[.]236[.]178[.]210/b/b3/cgi[.]php
http://crestmart[.]ga/main/l09/US/mode[.]php