Lokibot_IOCs_2019-11-25_14_02.txt

#Lokibot #malware #OSINT #IOC

MD5s:
11d4ba3f1c1aa60ce6808a6592db9f4c
58c1d943c0127f9b717a65ca7c4cdabb
654cff8cab6eb335e768f446e2bf31b6
917907d1dea3d46c1685b6095874d13d
9b646dd73599f29bc28f0ee6251d460b
ba294cd490cae0ec4c817b13905103c6

IPs:
107[.]175[.]150[.]73
151[.]80[.]3[.]78
42[.]112[.]16[.]145
45[.]252[.]248[.]29
51[.]81[.]26[.]73
51[.]91[.]175[.]183

Domains:
dangkivayvon[.]com
uzoma[.]ru

URL:
http://107[.]175[.]150[.]73/~giftioz/[.]cttr/fre[.]php,
http://151[.]80[.]3[.]78/mte/4/cat[.]php,
http://51[.]81[.]26[.]73/v1n/x/cat[.]php,
http://51[.]91[.]175[.]183/org/cat[.]php,
http://dangkivayvon[.]com/mx/playbook/onelove/fre[.]php,
http://uzoma[.]ru/db/Panel/five/fre[.]php,