Rewterz Threat Alert – LokiBot – Fresh IOCs - Rewterz
Tags
| attack-pattern: | Data Dns - T1071.004 Dns - T1590.002 Malware - T1587.001 Malware - T1588.001 Denial Of Service |
Common Information
| Type | Value |
|---|---|
| UUID | 3e7c6694-5f69-47ac-8dfd-ef59b889d732 |
| Fingerprint | 8dba49f56fdfaf4f |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Jan. 13, 2021, 10:44 a.m. |
| Added to db | Dec. 19, 2024, 7:27 p.m. |
| Last updated | Dec. 19, 2024, 8:23 p.m. |
| Headline | Rewterz Threat Alert – LokiBot – Fresh IOCs |
| Title | Rewterz Threat Alert – LokiBot – Fresh IOCs - Rewterz |
| Detected Hints/Tags/Attributes | 25/1/20 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 3 | cve-2021-21447 |
|
| Details | CVE | 3 | cve-2021-21446 |
|
| Details | Domain | 1 | azme-contractors.com |
|
| Details | Domain | 1 | hqbint.com |
|
| Details | Domain | 10 | becharnise.ir |
|
| Details | Domain | 1 | mndyperezluzcafeyzmn.dns.army |
|
| Details | Domain | 1 | truantinmobiliaria.com.ar |
|
| Details | IPv4 | 1 | 185.206.215.56 |
|
| Details | IPv4 | 1 | 185.239.242.101 |
|
| Details | IPv4 | 11 | 51.195.53.221 |
|
| Details | Url | 1 | http://185.206.215.56/r-1/cgi.php |
|
| Details | Url | 1 | http://185.239.242.101/d/ql-0217.jpg |
|
| Details | Url | 1 | http://azme-contractors.com/chief/har/fre.php |
|
| Details | Url | 1 | https://hqbint.com/nipat/fre.php |
|
| Details | Url | 1 | http://becharnise.ir/fa2/fre.php |
|
| Details | Url | 1 | http://azme-contractors.com/chief/kev/fre.php |
|
| Details | Url | 1 | http://mndyperezluzcafeyzmn.dns.army/perdoc/regasm.exe |
|
| Details | Url | 1 | http://51.195.53.221/p.php/cfoozyb0lxpms |
|
| Details | Url | 1 | http://truantinmobiliaria.com.ar/zz1/panel/fre.php |
|
| Details | Url | 1 | http://truantinmobiliaria.com.ar/zk/panel/fre.php |