Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 22:05:16 UTC
Home > List all groups > List all tools > List all groups using tool glue30.dll
 Tool: glue30.dll
Names glue30.dll
Category Malware
Type Keylogger
Description
(Kaspersky) The glue30.dll malware module provides keylogging functionality. The
updater.mod module uses the Win API function SetWindowsHookExW to install hooks for the
keyboard and to inject glue30.dll into processes that get keyboard input. After that, glue30.dll
loads and begins intercepting input in the context of each hooked process.
Information Last change to this tool card: 20 April 2020
Download this tool card in JSON format
All groups using tool glue30.dll
Changed Name Country Observed
APT groups
 DarkUniverse [Unknown] 2017
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=83b4e3f9-419c-4382-a035-6490a4901d2a
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=83b4e3f9-419c-4382-a035-6490a4901d2a
Page 1 of 1