{
	"id": "a42932bd-6ad6-4606-82bd-e09bfd34b980",
	"created_at": "2026-04-06T00:10:15.08025Z",
	"updated_at": "2026-04-10T03:36:08.356271Z",
	"deleted_at": null,
	"sha1_hash": "17a8c6ef92bbee5ed2793d44c0e0e5a44c6e82f4",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 44566,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 16:03:43 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool lite_more_eggs\n Tool: lite_more_eggs\nNames lite_more_eggs\nCategory Malware\nType Loader\nDescription\n(QuoINT) The tool lite_more_eggs is a JS loader similar to the More_eggs JS backdoor. The\nJS loader is basically the same code basis as more_eggs which is the reason we dubbed it\nlite_more_eggs.\nInformation\nLast change to this tool card: 10 July 2020\nDownload this tool card in JSON format\nAll groups using tool lite_more_eggs\nChanged Name Country Observed\nAPT groups\n Venom Spider, Golden Chickens 2017-Jan 2025\n1 group listed (1 APT, 0 other, 0 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=abf48421-2e5c-418c-a2d0-159ef75387bb\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=abf48421-2e5c-418c-a2d0-159ef75387bb\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=abf48421-2e5c-418c-a2d0-159ef75387bb"
	],
	"report_names": [
		"listgroups.cgi?u=abf48421-2e5c-418c-a2d0-159ef75387bb"
	],
	"threat_actors": [
		{
			"id": "f5c90ccc-0f18-4e07-a246-b62101ab2f6f",
			"created_at": "2023-01-06T13:46:38.854407Z",
			"updated_at": "2026-04-10T02:00:03.122844Z",
			"deleted_at": null,
			"main_name": "GC02",
			"aliases": [
				"Golden Chickens",
				"Golden Chickens02",
				"Golden Chickens 02"
			],
			"source_name": "MISPGALAXY:GC02",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "f2fa9952-301f-4376-ac69-743d6f2bec1e",
			"created_at": "2023-01-06T13:46:39.122721Z",
			"updated_at": "2026-04-10T02:00:03.22231Z",
			"deleted_at": null,
			"main_name": "VENOM SPIDER",
			"aliases": [
				"badbullz",
				"badbullzvenom"
			],
			"source_name": "MISPGALAXY:VENOM SPIDER",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "88802a4b-5b3d-42ee-99e6-8a4f5fd231f6",
			"created_at": "2023-01-06T13:46:38.851345Z",
			"updated_at": "2026-04-10T02:00:03.121861Z",
			"deleted_at": null,
			"main_name": "GC01",
			"aliases": [
				"Golden Chickens",
				"Golden Chickens01",
				"Golden Chickens 01"
			],
			"source_name": "MISPGALAXY:GC01",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "7a257844-df90-4bd4-b0f1-77d00ff82802",
			"created_at": "2022-10-25T16:07:24.376356Z",
			"updated_at": "2026-04-10T02:00:04.964565Z",
			"deleted_at": null,
			"main_name": "Venom Spider",
			"aliases": [
				"Golden Chickens",
				"TA4557",
				"Venom Spider"
			],
			"source_name": "ETDA:Venom Spider",
			"tools": [
				"More_eggs",
				"PureLocker",
				"SONE",
				"SpicyOmelette",
				"StealerOne",
				"Taurus Builder",
				"Taurus Builder Kit",
				"Taurus Loader",
				"Taurus Loader Reconnaissance Module",
				"Taurus Loader Stealer Module",
				"Taurus Loader TeamViewer Module",
				"Terra Loader",
				"TerraCrypt",
				"TerraLogger",
				"TerraPreter",
				"TerraRecon",
				"TerraStealer",
				"TerraTV",
				"TerraWiper",
				"ThreatKit",
				"VenomKit",
				"VenomLNK",
				"lite_more_eggs"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434215,
	"ts_updated_at": 1775792168,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/17a8c6ef92bbee5ed2793d44c0e0e5a44c6e82f4.pdf",
		"text": "https://archive.orkl.eu/17a8c6ef92bbee5ed2793d44c0e0e5a44c6e82f4.txt",
		"img": "https://archive.orkl.eu/17a8c6ef92bbee5ed2793d44c0e0e5a44c6e82f4.jpg"
	}
}