Lokibot_IOCs_2020-03-12_13_02.txt

#Lokibot #malware #OSINT #IOC

SHA256:
09ff326c1cd052589d37ac862967ca9bf22cc738d64f4b4254066fcf7a048df3
21528f7854b9c75d08cfadec409c8684f678c3e65023125962f834e11272b1c1
26f63d420c215185e646c8b9bdb9911dbc10d397db0c5f8ac987173b9b9d3511
2c90f5408cc210897f5e32d4aa24888d527adecb2010014cb2ca517c3ce3ecf1
3713f5384e38219f67a8eb8047deb6c51ea1baa6fbb0c7e2aa905b3df632f795
57b8f7f9eceb5c0311c1ff7a0e13535a26d098a0fef8f9f754f8e5cbacf22953
77eae0bb623714f3bbb31f54f03f8e5022c4450e8ef50c28ae682d9565d2f682
9ec0d81bf2578741b73b32f74a8a4243d5db2cb1cd54c83b87d347cccd8e487e
c59765ce005334585dd542ecd2848934e16dc9302a346e5c01db34ffe444ee11
e8c63b53a2da4b85970adc4823ea95ed2dcb1e63f232f651b1f23a46250387c4

IPs:
89[.]208[.]210[.]190
91[.]215[.]169[.]59
91[.]215[.]170[.]202
95[.]181[.]198[.]200

Domains:
cpf-th[.]com
marroiq[.]com

URL:
http://cpf-th[.]com/dark/five/fre[.]php

http://cpf-th[.]com/data/five/fre[.]php

http://marroiq[.]com/mmc/pin[.]php