Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 13:34:03 UTC
Home > List all groups > List all tools > List all groups using tool JpgRun
 Tool: JpgRun
Names
JpgRun
JpgRun Loader
Category Malware
Type Loader
Description
(Symantec) Customer loader written in C++ - similar to xPack, reads the decryption key and
filename from the command line - decodes the file and executes it.
Information
<https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/china-apt-antlion-taiwan-financial-attacks>
Last change to this tool card: 04 February 2022
Download this tool card in JSON format
All groups using tool JpgRun
Changed Name Country Observed
APT groups
  Antlion 2011  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=afe5e53c-c7f2-4759-90d8-e879ad05c8ae
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=afe5e53c-c7f2-4759-90d8-e879ad05c8ae
Page 1 of 1