Lokibot_IOCs_2020-02-03_14_31.txt

#Lokibot #malware #OSINT #IOC

SHA256:
05c6acf2debebc5b997fe60a0db69e4909d952dbee86a24051d6a35aa654cbd4
51203fd66caae398b0681cd5213ac249772cb4acdb2b488919139edac6ec14e1
796faee4e99839d1dd11e7bc1205e67cd89fe31bb6fa6ab2743310868935f671
9641ffa19534a678f166c9d0366565fac0dd679e76a7f18c71552a4f86cd433d

IPs:
103[.]116[.]16[.]173
209[.]141[.]59[.]245
89[.]208[.]84[.]96
95[.]163[.]212[.]79

Domains:
batlxt[.]org
bit[.]ly
fiftint[.]com
top-sso3[.]top

URL:
http://209[.]141[.]59[.]245/Dip/092165[.]jpg
http://batlxt[.]org/blL0/pin[.]php
http://batlxt[.]org/v1/pin[.]php
http://fiftint[.]com/v-2/pin[.]php
http://fiftint[.]com/vag-2/pin[.]php
http://top-sso3[.]top/lokivo/Panel/five/fre[.]php