Freenki Loader - Threat Group Cards: A Threat Actor
Encyclopedia
Archived: 2026-04-05 13:49:25 UTC
Home > List all groups > List all tools > List all groups using tool Freenki Loader
 Tool: Freenki Loader
Names Freenki Loader
Category Malware
Type Downloader
Description
(Palo Alto) Freenki has two main purposes. The first is to collect host information and the
other is to serve as a second stage downloader. Each of these will be explained in detail in
the following section.
Freenki depends on the right command line argument being passed to execute any of its
interesting code, if no arguments are passed it simply exits.
Information
Malpedia AlienVault OTX Last change to this tool card: 13 May 2020
Download this tool card in JSON format
All groups using tool Freenki Loader
Changed Name Country Observed
APT groups
 Reaper, APT 37, Ricochet Chollima, ScarCruft 2012-Mar 2025
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b91345a6-2eb5-46bd-8486-cab5545489b4
Page 1 of 2

1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b91345a6-2eb5-46bd-8486-cab5545489b4
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b91345a6-2eb5-46bd-8486-cab5545489b4
Page 2 of 2