Lokibot_IOCs_2020-02-10_14_49.txt

#Lokibot #malware #OSINT #IOC

SHA256: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IPs:
103[.]74[.]123[.]4
89[.]208[.]196[.]16

Domains:
batlxt[.]org
dongthanhcompany[.]vn
fiftint[.]com

URL:
http://batlxt[.]org/1g7/pin[.]php
http://batlxt[.]org/v1/pin[.]php
http://dongthanhcompany[.]vn/[.]ox/playbook/onelove/fre[.]php
http://fiftint[.]com/st3/pin[.]php
http://fiftint[.]com/v-2/pin[.]php
http://fiftint[.]com/vag-2/pin[.]php