Rewterz Threat Alert – LokiBot Malware – IOCs - Rewterz
Tags
| attack-pattern: | Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 |
Common Information
| Type | Value |
|---|---|
| UUID | 3730440b-9107-44be-aee0-977fe32bece7 |
| Fingerprint | 85b62043efd5bf4f |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | July 17, 2020, 10:55 a.m. |
| Added to db | Dec. 18, 2024, 10:05 p.m. |
| Last updated | Dec. 19, 2024, 5:39 p.m. |
| Headline | Rewterz Threat Alert – LokiBot Malware – IOCs |
| Title | Rewterz Threat Alert – LokiBot Malware – IOCs - Rewterz |
| Detected Hints/Tags/Attributes | 23/1/8 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 3 | cve-2020-14304 |
|
| Details | Domain | 1 | bsskillwsdyemmulatorsdevelovercommunity.duckdns.org |
|
| Details | Domain | 3 | abass.ir |
|
| Details | IPv4 | 5 | 195.69.140.147 |
|
| Details | Url | 1 | http://195.69.140.147/.op/cr.php/qq9rx53cntmrh |
|
| Details | Url | 1 | http://bsskillwsdyemmulatorsdevelovercommunity.duckdns.org/bssdoc/win32.exe |
|
| Details | Url | 1 | http://195.69.140.147/.op/cr.php/gusoluxstqsr4 |
|
| Details | Url | 1 | http://abass.ir/ugobuild/chucksloki.exe |