Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 14:14:57 UTC
Home > List all groups > List all tools > List all groups using tool Adzok
 Tool: Adzok
Names
Adzok
Invisible Remote Administrator
Category Tools
Type Reconnaissance, Backdoor, Credential stealer, Info stealer, Exfiltration
Description
(Citizen Lab) Similar to Adwind in functionality, the java-based Adzok is apparently from
Bolivia. The premium version costs $990, but it appears that Packrat is using the “free”
version. This version of Adzok does not use obfuscation, which makes it possible to simply
uncompress the jar files within the docx and read the clear-text configuration file. Given the
obfuscated nature of the other RATs that Packrat has used, their use of Adzok is surprising. It
is possible that they were having stability, compatibility, or detection problems with other
RATs and that Adzok served a specific requirement.
Information
Malpedia Last change to this tool card: 24 April 2021
Download this tool card in JSON format
All groups using tool Adzok
Changed Name Country Observed
APT groups
 Packrat [Latin America] 2008
1 group listed (1 APT, 0 other, 0 unknown)
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=cc7e8c06-7e44-4441-9fe0-5479cdb262fa
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=cc7e8c06-7e44-4441-9fe0-5479cdb262fa
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=cc7e8c06-7e44-4441-9fe0-5479cdb262fa
Page 2 of 2

APT groups  Packrat [Latin America] 2008
1 group listed (1 APT, 0 other, 0 unknown) 
   Page 1 of 2