{
	"id": "e8067d2c-0b3e-4f34-b122-10c5e5809fec",
	"created_at": "2026-04-06T00:13:37.021481Z",
	"updated_at": "2026-04-10T13:12:08.214783Z",
	"deleted_at": null,
	"sha1_hash": "0326153057e78904b2241eb66df8df5a359d05f5",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 62473,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 20:26:51 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool DroidJack\n Tool: DroidJack\nNames DroidJack\nCategory Malware\nType Backdoor\nDescription\nDroidJack is an Android remote access tool that has been observed posing as legitimate\napplications including the Super Mario Run and Pokemon GO games.\nInformation\nMITRE ATT\u0026CK Malpedia AlienVault OTX Last change to this tool card: 29 December 2022\nDownload this tool card in JSON format\nAll groups using tool DroidJack\nChanged Name Country Observed\nAPT groups\n Group5 2015\n ↳ Subgroup: Pat Bear, APT-C-37 2015\n2 groups listed (2 APT, 0 other, 0 unknown)\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f830ab0f-1edc-4f98-9a38-ccc57909215c\nPage 1 of 2\n\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f830ab0f-1edc-4f98-9a38-ccc57909215c\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f830ab0f-1edc-4f98-9a38-ccc57909215c\r\nPage 2 of 2\n\n Group5 ↳ Subgroup: Pat Bear, APT-C-37 2015 2015  \n2 groups listed (2 APT, 0 other, 0 unknown) \n   Page 1 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f830ab0f-1edc-4f98-9a38-ccc57909215c"
	],
	"report_names": [
		"listgroups.cgi?u=f830ab0f-1edc-4f98-9a38-ccc57909215c"
	],
	"threat_actors": [
		{
			"id": "9aa9b489-a297-4dbd-8601-8fc0370201a6",
			"created_at": "2022-10-25T16:07:23.696796Z",
			"updated_at": "2026-04-10T02:00:04.71508Z",
			"deleted_at": null,
			"main_name": "Group5",
			"aliases": [
				"G0043"
			],
			"source_name": "ETDA:Group5",
			"tools": [
				"Atros2.CKPN",
				"Bladabindi",
				"DroidJack",
				"Jorik",
				"Nancrat",
				"NanoCore",
				"NanoCore RAT",
				"Zurten",
				"njRAT"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "cf0704ab-99e4-44d7-96d9-3cba91339229",
			"created_at": "2022-10-25T15:50:23.485375Z",
			"updated_at": "2026-04-10T02:00:05.332806Z",
			"deleted_at": null,
			"main_name": "Group5",
			"aliases": [
				"Group5"
			],
			"source_name": "MITRE:Group5",
			"tools": [
				"njRAT",
				"NanoCore"
			],
			"source_id": "MITRE",
			"reports": null
		},
		{
			"id": "094d8210-4c64-4457-ad97-a94fc7af7630",
			"created_at": "2023-01-06T13:46:38.98103Z",
			"updated_at": "2026-04-10T02:00:03.170376Z",
			"deleted_at": null,
			"main_name": "Group5",
			"aliases": [
				"G0043"
			],
			"source_name": "MISPGALAXY:Group5",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "0769c188-62ce-44ee-8e9d-1067f3d3c083",
			"created_at": "2022-10-25T16:07:24.259063Z",
			"updated_at": "2026-04-10T02:00:04.913621Z",
			"deleted_at": null,
			"main_name": "Pat Bear",
			"aliases": [
				"APT-C-37",
				"Pat Bear",
				"Racquet Bear"
			],
			"source_name": "ETDA:Pat Bear",
			"tools": [
				"Bladabindi",
				"CypherRat",
				"DroidJack",
				"H-Worm",
				"H-Worm RAT",
				"Houdini",
				"Houdini RAT",
				"Hworm",
				"Iniduoh",
				"Jenxcus",
				"Jorik",
				"Kognito",
				"Njw0rm",
				"SSLove RAT",
				"SpyNote",
				"SpyNote RAT",
				"WSHRAT",
				"dinihou",
				"dunihi",
				"njRAT"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434417,
	"ts_updated_at": 1775826728,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/0326153057e78904b2241eb66df8df5a359d05f5.pdf",
		"text": "https://archive.orkl.eu/0326153057e78904b2241eb66df8df5a359d05f5.txt",
		"img": "https://archive.orkl.eu/0326153057e78904b2241eb66df8df5a359d05f5.jpg"
	}
}