Lokibot_IOCs_2020-02-12_15_22.txt

#Lokibot #malware #OSINT #IOC

SHA256:
010eb6c73c5f30d2a8b67f1f13b541b5f86abd819198aa7d4a7c7af012e18f0d
4e8c29489e2d38bcb0c5f8f58f627ef0e52b3be929d157abe9107d0f3657d4cd
581c81d8b40db011e84d4e5a394cb28e63a1897d1e8bf0023cd365e534dd1cb8
7ab9b1c69859f602ff3b58664f229f867a14c8c18773b73835845785ba790639
9ed50e93f4a62bcaaaefda09a065e54a872cc2894c3acd9d5556562d83f1d311
b1b03caa6aaea2b7dad782ba0b81911abdafef47be2f9169a1b1aaca9ae0abe4

IPs:
198[.]23[.]200[.]241
89[.]208[.]196[.]16

Domains:
fiftint[.]com

URL:
http://fiftint[.]com/st3/pin[.]php
http://fiftint[.]com/vag-2/pin[.]php