Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 18:34:46 UTC
Home > List all groups > List all tools > List all groups using tool IsSpace
 Tool: IsSpace
Names
IsSpace
NfLog RAT
Category Malware
Type Reconnaissance, Backdoor
Description
(Palo Alto) To determine the flow of execution, IsSpace gathers various data about the
infected host, such as administrative rights of the user, operating system version, and CPU
architecture.
If IsSpace determines that it is running as an administrator on a Microsoft Windows 7
system on a 32-bit platform, it will attempt to execute itself accordingly, using a side-loading technique.
Information
Malpedia AlienVault OTX Last change to this tool card: 23 April 2020
Download this tool card in JSON format
All groups using tool IsSpace
Changed Name Country Observed
APT groups
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=fc217926-738a-4c3e-8d5f-987259d84030
Page 1 of 2

DragonOK 2015-Jan 2017  
  Samurai Panda 2009  
2 groups listed (2 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=fc217926-738a-4c3e-8d5f-987259d84030
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=fc217926-738a-4c3e-8d5f-987259d84030
Page 2 of 2