Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 21:54:47 UTC Home > List all groups > List all tools > List all groups using tool Md_client Tool: Md_client Names Md_client Category Malware Type Reconnaissance, Backdoor, Downloader, Exfiltration Description (Bitdefender) This component uses the UDP and the 53 port to communicate with the C&C server and is capable of: • Collecting system information like computer name, user name, osverion, processor architecture; • Creating a remote shell by running a cmd.exe with stdin/stdout/stderr “connected” to the C&C • Sending the Logical Drive Strings • Listing a directory • Uploading and downloading a file • Deleting a directory • Executing a command using ShellExecuteW • Executing a command using CreateDesktop (“mydktop1”) and CreateProcess Information Last change to this tool card: 06 January 2021 Download this tool card in JSON format All groups using tool Md_client Changed Name Country Observed APT groups   FunnyDream 2018   https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=334f29bc-e758-4e35-ac9b-d35e4d4e5179 Page 1 of 2 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=334f29bc-e758-4e35-ac9b-d35e4d4e5179 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=334f29bc-e758-4e35-ac9b-d35e4d4e5179 Page 2 of 2