Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 00:20:28 UTC
Home > List all groups > List all tools > List all groups using tool Ecipekac
 Tool: Ecipekac
Names
Ecipekac
DESLoader
SigLoader
HEAVYHAND
Category Malware
Type Loader
Description
(Kaspersky) We observed a multi-layer x64 loader used exclusively by this actor and
dubbed Ecipekac after a unique string found in the second layer of the Ecipekac loader.
The string is “Cake piece” in reverse (with a typo).
Information
MITRE ATT&CK Last change to this tool card: 30 December 2022
Download this tool card in JSON format
All groups using tool Ecipekac
Changed Name Country Observed
APT groups
 Stone Panda, APT 10, menuPass 2006-Mar 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=0b211331-3290-4379-9c5f-19e1c64cf028
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=0b211331-3290-4379-9c5f-19e1c64cf028
Page 1 of 1