Campaigns / Malware / Family

Loki

88New IOCs · 24h
261New IOCs · 7 days
263Indicators tracked
2Independent feeds
2026-10-12 07:26Last activity

New indicators per day

2026-09-29 to 2026-10-12, by first report.

  • Hash177
  • IP84
  • TLS cert2
  • Malware261
  • C22

Where its infrastructure is hosted

  1. 🇺🇸 United States20
  2. 🇩🇪 Germany9
  3. 🇷🇺 Russia9
  4. 🇳🇱 Netherlands7
  5. 🇫🇷 France6
  6. 🇲🇩 Moldova4
  7. 🇨🇭 Switzerland3
  8. 🇫🇮 Finland3
  9. 🇸🇨 Seychelles3
  10. 🇮🇹 Italy2
  11. 🇧🇷 Brazil2
  12. 🇲🇽 Mexico2

Latest indicators

Filter the live feed →
First seenTypeIndicatorRoleWhere
2026-10-12 07:26IP84.200.69[.]80Contacted by malware—
2026-10-12 07:26IP185.7.214[.]212Contacted by malware—
2026-10-12 07:26IP185.7.214[.]210Contacted by malware—
2026-10-12 06:58SHA2569deb11b590d3ad059ef7267841d552f2ff4ea7206f03ef7d691ad6df609c1caeMalware sample—
2026-10-12 06:58IP95.216.186[.]40Contacted by malware—
2026-10-12 06:58IP185.215.113[.]17Contacted by malware—
2026-10-12 06:32IP198.54.117[.]211Contacted by malware—
2026-10-12 06:32IP198.54.117[.]212Contacted by malware—
2026-10-12 06:32IP198.54.117[.]215Contacted by malware—
2026-10-12 06:32IP198.54.117[.]210Contacted by malware—
2026-10-12 06:32IP198.54.117[.]217Contacted by malware—
2026-10-12 06:32IP198.54.117[.]218Contacted by malware—
2026-10-12 06:32IP198.54.117[.]216Contacted by malware—
2026-10-12 05:00SHA256a9afccce41c1df8fb32419261ab69c3964fd0750262b63f96e5e22b4f35ae0f6Malware sample—
2026-10-12 05:00IP193.56.146[.]244Contacted by malware—
2026-10-12 05:00IP150.171.109[.]74Contacted by malware—
2026-10-12 04:45IP185.186.142[.]166Contacted by malware—
2026-10-12 04:15SHA256c44613cc9afc148b12397a0fa9a621ec70294ecaabd7b06e0435f47d61bca260Malware sample—
2026-10-12 04:15IP104.215.148[.]63Contacted by malware—
2026-10-12 04:15IP193.56.146[.]188Contacted by malware—
2026-10-12 04:15IP193.56.146[.]42Contacted by malware—
2026-10-12 04:15IP193.56.146[.]43Contacted by malware—
2026-10-12 04:15IP193.56.146[.]41Contacted by malware—
2026-10-12 04:00SHA256f9a3d33c58232816986d1d4789534f46b79936ca622e92a719676f234b1de8fdMalware sample—
2026-10-12 04:00IP104.47.58[.]110Contacted by malware—
2026-10-12 03:30SHA256eee7004166fe9d232fd5fdfcf6a7838591141defea0ea73114f1bc011614e398Malware sample—
2026-10-12 03:30IP211.59.14[.]90Contacted by malware—
2026-10-12 03:30IP189.245.117[.]24Contacted by malware—
2026-10-12 03:00IP183.100.39[.]157Contacted by malware—
2026-10-12 02:45SHA256f8a665b3a6fc409d971f2b35fd17dc0699d7b84f0fd10864af4ca54780fa9550Malware sample—
2026-10-12 02:18IP185.215.113[.]201Contacted by malware—
2026-10-12 02:02SHA2562662c8224c3724da33247ab282c0cec0689c0e546f5602d37c4c571ecab054f2Malware sample—
2026-10-12 02:02SHA2568dea3554c6a767809d78f7b0ee9f41ec3a18fb5ba1cb926fd8c5d374e89079dbMalware sample—
2026-10-12 02:02SHA256bb5cb93a14c9900fc268f00045ceb9155a0f526b6820f63768bff582fb3eefcfMalware sample—
2026-10-12 02:02IP203.91.116[.]53Contacted by malware—
2026-10-11 17:07SHA2566b4059a7ece9c4aa1d56eafa7d26190dd5698740635ba722043ef5406912758fMalware sample—
2026-10-11 17:07SHA25674a4ef72ab8995e70ff796ec526cd5b043482f862884f43b2a6f6ef2470d01e8Malware sample—
2026-10-11 16:52SHA256313cbb1c3075ca3e0691ef45759bf041128ed6896a879786509388d58a387617Malware sample—
2026-10-11 15:31SHA2563fe6abb777b058759aa406f1fc26f31a4b3f22dff9178978c62f28ee83268458Malware sample—
2026-10-11 15:31SHA2565068322b2b4c8f8bbca84a9ba0f5a15cc2609840703580dcca9e1778b23fa8ddMalware sample—
2026-10-11 15:31SHA2565c3ce9eb38a43418002caeed9ffa7a1b0c8d09f43791c7ae3efb17bc07d22226Malware sample—
2026-10-11 15:31SHA2565cc5377a1ec8f9eae88b93a014c260cec38ea673513b29819a64c9df98b11fb8Malware sample—
2026-10-11 15:31SHA256c02c04b58f07815029a23f5335ab3ebaedcd851a96cb6fbd050d76a2360750caMalware sample—
2026-10-11 15:31IP193.233.48[.]90Contacted by malware—
2026-10-11 15:16SHA2564001f1c7f8beaf7617dab488e7f1feca14106fa095b82c836cb19829dd47b200Malware sample—
2026-10-11 15:16SHA2564cafc3c7347e50a748a07c6248453b27f6cf0348fb2368d1931a1c6d51d680c5Malware sample—
2026-10-11 15:16SHA25652af6c89031df2ff647ffd4c57a772a2b747d0380717d83dfd1ad3ed1e471234Malware sample—
2026-10-11 15:16SHA25653bd0fec8185e732a102c10ba9c4ece9d74a487bf7c57e3a8cdfa041318f954fMalware sample—
2026-10-11 15:16SHA2568d4044939706fcb684643ae20acb3f8efea6837ad909c219ff7627c10eeadee4Malware sample—
2026-10-11 15:16SHA256a90a2bdc4f7dbc2c3160d94d6dbb96aee0cbd2da24d448e9edc5d7125a4759e0Malware sample—
2026-10-11 15:16SHA256df98c1e60a4ccc644076babe825229d7b082019f3dad4a834e17c2eda8fd3dbfMalware sample—
2026-10-11 14:59SHA25628a31750819933e202b59ba6367ea1a333f57e518ceffed9eb0f9bd0b23b182cMalware sample—
2026-10-11 14:43SHA2561cc223a3a3eff404bdee205145620e2fe696eeb2acd5b3c8750fc0f5cd6d0eadMalware sample—
2026-10-11 14:43SHA256430e4d939f601592eb4045449690f078bf613f35a90888b83bae7fa4ddd91bf6Malware sample—
2026-10-11 14:43SHA2566860eb19d583c42f6bee85b1da1808b0f05f80881d29f39f8b482bb6a62075d2Malware sample—
2026-10-11 14:43IP45.87.154[.]2Contacted by malware—
2026-10-11 14:43IP206.189.100[.]203Contacted by malware—
2026-10-11 14:27SHA2561132fd4405ea01ff2fd6301c26795e8dd6076fe2538fbe11752c79afdcb5b382Malware sample—
2026-10-11 14:27SHA2563a122256579c7195764c18e9134fa0b2718f037ae35061845ff66bc78059d9d4Malware sample—
2026-10-11 14:27SHA256553e145f261e0f477606d1df806aec7d083ddd05b53008bf937b4d888488ac2bMalware sample—
2026-10-11 14:27SHA2567afa5ac7052b31f4d454e2465f8afdb73e017168100a95644005f4e45b2ffc9dMalware sample—
2026-10-11 14:27SHA256befe32a43fe241d39ca7ccd7b12b655253ee1bb24af9ceffdd96b98b9c7d5f7aMalware sample—
2026-10-11 14:27SHA256d5eaa0946fe6a271b030a8b488434e474e5bf76a5216ee8449fb8ee48fa27a36Malware sample—
2026-10-11 14:27IP5.181.156[.]120Contacted by malware—
2026-10-11 14:27IP94.158.245[.]173Contacted by malware—
2026-10-11 14:27IP91.219.237[.]226Contacted by malware—
2026-10-11 14:09SHA2560d95eec681bcae9e4abd3061f659a1582c606c645c7031e0a48a0d8b2f858b35Malware sample—
2026-10-11 14:09SHA2561eeddc7512866bcfe8c4428bab292dd4bd00a38a774f286a64cb70775ecdd817Malware sample—
2026-10-11 14:09SHA2565ebbce2377a8b2d44f6581d91784db05dc4f6e800d00ecc37d26ea49897fffe9Malware sample—
2026-10-11 14:09SHA256a68701399c4ab41d1ca057c2c68eda2a6f7eb68fe17e3a9ec159b3ecbb6e1223Malware sample—
2026-10-11 14:09SHA256a719d42fa966a5b54b9289f62cccebca0f4fee68d67ffe127911ec0aa67a79fcMalware sample—
2026-10-11 14:09SHA256d494747084c2fe615fa8df0a9d51b05f7c4f8a4d68dc44c2cfd96b8a3431125cMalware sample—
2026-10-11 14:09IP185.32.222[.]237Contacted by malware—
2026-10-11 14:09IP185.220.101[.]239Contacted by malware—
2026-10-11 14:09IP185.220.101[.]232Contacted by malware—
2026-10-11 14:09IP45.154.98[.]13Contacted by malware—
2026-10-11 14:09IP104.244.76[.]184Contacted by malware—
2026-10-11 14:09IP51.161.35[.]113Contacted by malware—
2026-10-11 14:09IP194.76.227[.]152Contacted by malware—
2026-10-11 14:09IP95.211.138[.]7Contacted by malware—
2026-10-11 14:09IP46.4.66[.]178Contacted by malware—
2026-10-11 14:09IP95.217.83[.]182Contacted by malware—
2026-10-11 14:09IP188.68.46[.]245Contacted by malware—
2026-10-11 13:36SHA2565fb625d8973fac5c2ec9ecdbd523a02df57e19b4d6d4580b0816153cef96ffb3Malware sample—
2026-10-11 13:02SHA256a688e863d683e08fdeec9d225f2d87d034c92126bd47a9126f25d0691e0aa101Malware sample—
2026-10-11 11:47SHA2565889c1cf70244f753101e6eaabd0d2b2600c53882c5f6fa190742828a257d70eMalware sample—
2026-10-11 10:43SHA256b6c0588c6d00ff08f99f69264bd959759298d223aadf1efc39037693b1cb98eeMalware sample—
2026-10-11 09:38SHA2563dd4dc895f4fe36bc145eb8c2ec54335c52cadddd189a0f9a4f4b50b0cf287e0Malware sample—
2026-10-11 08:09SHA256dddc00f8127e88dbd7beae5f901db1a3bb1377f0bbb077f5473bc072afde337fMalware sample—
2026-10-11 08:09IP94.158.245[.]250Contacted by malware—
2026-10-11 08:09IP205.185.119[.]191Contacted by malware—
2026-10-11 07:45SHA2568539438965ed29b41254ddc4d267a6288de14aaa527ac8e6f6be9be8532cad78Malware sample—
2026-10-11 07:45SHA256cae6e52eea1ab162fae910da0f3e05511e3dbdcef880c7b086bc957d02f4a03aMalware sample—
2026-10-11 07:45SHA256d836b60d14bd3c28835b1048e5c975902a0a659816331642d953209d63460d54Malware sample—
2026-10-11 07:45IP144.160.155[.]69Contacted by malware—
2026-10-11 07:45IP103.224.182[.]242Contacted by malware—
2026-10-11 07:45IP103.147.182[.]42Contacted by malware—
2026-10-11 07:23SHA2569d29d5a2fa3e1b5213d8e73bfbc32cc9f716a7d8a261289decd409a806a4220dMalware sample—
2026-10-11 06:41SHA256ed7060442c3826f98ea3a5a07d275ebee8e4c9d29ea299d7d689e54fe35f963cMalware sample—
2026-10-11 06:20SHA25640795e01764a077a5bb0808047334b227e0b6385ca3a02443465149c807fb8b6Malware sample—

Defanged for safety. URL query strings removed.