Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 16:51:05 UTC Home > List all groups > List all tools > List all groups using tool SharpJSHandler Tool: SharpJSHandler Names SharpJSHandler Category Malware Type Backdoor Description (Bitdefender) One of the payloads carried by Ps2dllLoader is SharpJSHandler. It, in essence, is a webshell-like tool as suggested by the internal name of the final payload – noiis.dll, where iis indicates the agent is, in fact, an alternative for aspx webshells. Information Last change to this tool card: 18 June 2024 Download this tool card in JSON format All groups using tool SharpJSHandler Changed Name Country Observed APT groups   Unfading Sea Haze 2018   1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=bd593755-fb0f-4d2d-8cfc-31ea9809644b https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=bd593755-fb0f-4d2d-8cfc-31ea9809644b Page 1 of 1