{
	"id": "0ec7f7cf-ae02-4efd-8bdb-52bad5f57c71",
	"created_at": "2026-04-06T00:11:02.708529Z",
	"updated_at": "2026-04-10T03:36:08.299092Z",
	"deleted_at": null,
	"sha1_hash": "17dd2dc8744b62e24042519fedbeb2e24d8496aa",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 43041,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\r\nArchived: 2026-04-05 14:50:29 UTC\r\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool TerraLogger\r\n Tool: TerraLogger\r\nNames TerraLogger\r\nCategory Malware\r\nType Keylogger\r\nDescription (Recorded Future) TerraLogger is a keylogger observed as a standalone module.\r\nInformation \u003chttps://go.recordedfuture.com/hubfs/reports/cta-2025-0501.pdf\u003e\r\nLast change to this tool card: 27 June 2025\r\nDownload this tool card in JSON format\r\nAll groups using tool TerraLogger\r\nChanged Name Country Observed\r\nAPT groups\r\n  Venom Spider, Golden Chickens 2017-Jan 2025  \r\n1 group listed (1 APT, 0 other, 0 unknown)\r\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=7da90bac-917e-435b-a30e-340ea91aa933\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=7da90bac-917e-435b-a30e-340ea91aa933\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=7da90bac-917e-435b-a30e-340ea91aa933"
	],
	"report_names": [
		"listgroups.cgi?u=7da90bac-917e-435b-a30e-340ea91aa933"
	],
	"threat_actors": [
		{
			"id": "f5c90ccc-0f18-4e07-a246-b62101ab2f6f",
			"created_at": "2023-01-06T13:46:38.854407Z",
			"updated_at": "2026-04-10T02:00:03.122844Z",
			"deleted_at": null,
			"main_name": "GC02",
			"aliases": [
				"Golden Chickens",
				"Golden Chickens02",
				"Golden Chickens 02"
			],
			"source_name": "MISPGALAXY:GC02",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "f2fa9952-301f-4376-ac69-743d6f2bec1e",
			"created_at": "2023-01-06T13:46:39.122721Z",
			"updated_at": "2026-04-10T02:00:03.22231Z",
			"deleted_at": null,
			"main_name": "VENOM SPIDER",
			"aliases": [
				"badbullz",
				"badbullzvenom"
			],
			"source_name": "MISPGALAXY:VENOM SPIDER",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "88802a4b-5b3d-42ee-99e6-8a4f5fd231f6",
			"created_at": "2023-01-06T13:46:38.851345Z",
			"updated_at": "2026-04-10T02:00:03.121861Z",
			"deleted_at": null,
			"main_name": "GC01",
			"aliases": [
				"Golden Chickens",
				"Golden Chickens01",
				"Golden Chickens 01"
			],
			"source_name": "MISPGALAXY:GC01",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "7a257844-df90-4bd4-b0f1-77d00ff82802",
			"created_at": "2022-10-25T16:07:24.376356Z",
			"updated_at": "2026-04-10T02:00:04.964565Z",
			"deleted_at": null,
			"main_name": "Venom Spider",
			"aliases": [
				"Golden Chickens",
				"TA4557",
				"Venom Spider"
			],
			"source_name": "ETDA:Venom Spider",
			"tools": [
				"More_eggs",
				"PureLocker",
				"SONE",
				"SpicyOmelette",
				"StealerOne",
				"Taurus Builder",
				"Taurus Builder Kit",
				"Taurus Loader",
				"Taurus Loader Reconnaissance Module",
				"Taurus Loader Stealer Module",
				"Taurus Loader TeamViewer Module",
				"Terra Loader",
				"TerraCrypt",
				"TerraLogger",
				"TerraPreter",
				"TerraRecon",
				"TerraStealer",
				"TerraTV",
				"TerraWiper",
				"ThreatKit",
				"VenomKit",
				"VenomLNK",
				"lite_more_eggs"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434262,
	"ts_updated_at": 1775792168,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/17dd2dc8744b62e24042519fedbeb2e24d8496aa.pdf",
		"text": "https://archive.orkl.eu/17dd2dc8744b62e24042519fedbeb2e24d8496aa.txt",
		"img": "https://archive.orkl.eu/17dd2dc8744b62e24042519fedbeb2e24d8496aa.jpg"
	}
}