Lokibot_IOCs_2020-02-26_13_01.txt

#Lokibot #malware #OSINT #IOC

SHA256:
4420549e8a8e70608359856e2a41228aa306d21ff9df11374d19978415dd27a9
54cc1e064acab7fd8e3463c522e09d0290f7295c562f1e1c777e364167b431c7
6be2657cb0ad63bd0f01fe4cbd193c1882376e7ab08625a8d7d8c15b299ae07e
834a3ec9189827d6790b9356a6c813aa20d38533267717b616a5d37575261307
9f9bb90074b13e4cc90207bd891db2a696d75e01b86b3307b36738745aa1885e
bf46c0f854a11c113228abd6544ec54c81a344cfc96f07ac3c59eae46f473a4b
d1b2f65b28a57ce6df70de26603f57740e32676e3f245e063a4c00b5fa2a38bd
d35ed10a03b6b26509a353333e312073cfc9364000a5117902851baecf857606

IPs:
103[.]74[.]123[.]3
185[.]98[.]87[.]210
193[.]32[.]188[.]106
89[.]208[.]229[.]55

Domains:
imperiaskygarden[.]net
mikeservers[.]eu
naourl[.]com
pyungz[.]org

URL:
http://imperiaskygarden[.]net/[.]choo/playbook/onelove/fre[.]php
http://mikeservers[.]eu/kings/five/fre[.]php
http://naourl[.]com/drug/five/fre[.]php
http://pyungz[.]org/55j/fre[.]php