Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in
Get started About
User Guide
Log in Get started
Threat Actors loki

loki

TLP:CLEAR
Active
Kill Chain Analysis Generate Graph Hunt Package

Description

Known victims: 1

Goals & Targeting

Objectives

Ransomware
Financial Gain

AI Analysis

· 1 week ago

Executive Summary

Insufficient intelligence available on the threat actor named 'loki.' No specific details are provided regarding their activities, motivations, or capabilities.

Goals & Targeting

Insufficient intelligence available on the goals and targeting profile of 'loki.' Without additional data, it is not possible to analyze their strategic objectives or typical victims.

Enhanced Description

No detailed description of the threat actor named 'loki' is available. Further information is required to provide a comprehensive analysis of this entity.

Campaigns & Victims

No known campaigns or operational patterns associated with 'loki' have been identified in the available intelligence.

Recommended Actions

  • Implement strong email filtering and phishing detection mechanisms to mitigate potential threats.
  • Regularly update and patch systems to address known vulnerabilities.
  • Monitor network traffic for signs of malicious activity.

Suggested Tags

unknown
cyber threat

Confidence Assessment

Low confidence in the data provided. The lack of specific information on 'loki' limits the ability to produce actionable intelligence.

ATT&CK Techniques

No techniques linked yet.

Software / Tooling

No tools linked yet.

Campaigns / Victims

No campaigns linked yet.

Observed Data

No observed data linked yet.

Indicators of Compromise

View all →
URL 6 SHA256 1 MD5 1 IPV4 1 Domain 11
URL 6
http://techfonet.com/pw/Panel/five/fre.php
85% TLP:CLEAR
http://marconiliqhting.com/emma/encode.php
85% TLP:CLEAR
https://duclongetc.com/vvvv/need/work/Panel/five/fre.php?
65% TLP:CLEAR
http://duclongetc.com/vvvv/need/work/Panel/five/fre.php
85% TLP:CLEAR
http://158.94.211.95/kelly/five/fre.php
85% TLP:CLEAR
http://158.94.211.95/kelly/five/PvqDq929BSx_A_D_M1n_a.php
85% TLP:CLEAR
SHA256 1
558695e3c131c802602abb91b368cb4a1f04b6cf48b4e8ffaf86f1ec30394730
85% TLP:CLEAR
MD5 1
8ed6ba61d3f45cc25d65f72605ed3f18
85% TLP:CLEAR
IPV4 1
158.94.211.95
65% TLP:CLEAR
Domain 11
wowsupplier.ga
50% TLP:CLEAR
extensivee.bid
50% TLP:CLEAR
springlovee.at
50% TLP:CLEAR
vtraffic.su
50% TLP:CLEAR
shhtunnel.at
50% TLP:CLEAR
feed.networksupdates.com
50% TLP:CLEAR
blackircd.net
50% TLP:CLEAR
treasurehunter.at
50% TLP:CLEAR
4haters.ga
50% TLP:CLEAR
uspal.cf
50% TLP:CLEAR
duparseled.com
50% TLP:CLEAR
Open in full Indicators list →

References

No references recorded yet.

Intel Summary

0

Techniques

0

Tools

0

Campaigns

25

IOCs

0

Observed Data

0

Tactics

Tags

unknown
cyber threat

Details

Type
Criminal
Sophistication
Medium
Primary Motivation
Organizational gain
Confidence
80%
First Seen
Mar 12, 2026
Last Seen
Mar 12, 2026
Added
May 4, 2026
Notes
0
Log in to add a note
No notes yet. Click "Add Note" to create the first analysis note.
Opinions
0
Log in to add an opinion
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.