Loki_IOCs_2020-01-10_13_33.txt

#Lokibot #malware #OSINT #IOC

SHA256:
673820a327c8e56081c51d03cf086423a00361c3a71f7b2be9faeb6817c2c223
6777083c576a129eb42e3ac80138ac4b8852c720c6d05767da257f87e063d7cb
6966960b0f3aef98d90e73544d5d595888a5fc8bac7adbbc33945503dcb93dc4

IPs:
107[.]175[.]150[.]73
170[.]250[.]53[.]240
188[.]255[.]237[.]59
49[.]51[.]159[.]141

Domains:
noapology[.]duckdns[.]org
onlygoodem[.]com
tranpip[.]com

URL:
http://107[.]175[.]150[.]73/~giftioz/[.]soxot/fre[.]php
http://onlygoodem[.]com/ca3/fre[.]php
http://tranpip[.]com/tp/cat[.]php