{
	"id": "5d589a2e-fd14-4fb8-a470-dc9ecd248734",
	"created_at": "2026-04-06T00:14:40.866499Z",
	"updated_at": "2026-04-10T13:11:46.211617Z",
	"deleted_at": null,
	"sha1_hash": "421c7a4e758bae3db0483281534126ccb2439ccf",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 44281,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\r\nArchived: 2026-04-02 11:55:05 UTC\r\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool CXCLNT\r\n Tool: CXCLNT\r\nNames CXCLNT\r\nCategory Malware\r\nType Reconnaissance, Downloader, Exfiltration\r\nDescription\r\n(Trend Micro) CXCLNT has basic upload and download file capabilities, along with features\r\nfor clearing traces, collecting victim information such as file listings and computer names, and\r\ndownloading additional portable executable (PE) files for execution.\r\nInformation\r\n\u003chttps://www.trendmicro.com/en_us/research/24/i/tidrone-targets-military-and-satellite-industries-in-taiwan.html\u003e\r\nLast change to this tool card: 23 October 2024\r\nDownload this tool card in JSON format\r\nAll groups using tool CXCLNT\r\nChanged Name Country Observed\r\nAPT groups\r\n  TIDRONE [Unknown] 2024-2024  \r\n1 group listed (1 APT, 0 other, 0 unknown)\r\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=83f2fbc7-8931-4469-b595-5805ef0edbdf\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=83f2fbc7-8931-4469-b595-5805ef0edbdf\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=83f2fbc7-8931-4469-b595-5805ef0edbdf"
	],
	"report_names": [
		"listgroups.cgi?u=83f2fbc7-8931-4469-b595-5805ef0edbdf"
	],
	"threat_actors": [
		{
			"id": "7f0f8bbd-b91a-4e0d-9717-7ba87a101eb6",
			"created_at": "2024-09-20T02:00:04.568566Z",
			"updated_at": "2026-04-10T02:00:03.691713Z",
			"deleted_at": null,
			"main_name": "TIDRONE",
			"aliases": [
				"Earth Ammit"
			],
			"source_name": "MISPGALAXY:TIDRONE",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "21268fa8-7e4a-4cee-bb4f-cd26f9ae3de6",
			"created_at": "2024-10-25T02:02:07.979938Z",
			"updated_at": "2026-04-10T02:00:04.937108Z",
			"deleted_at": null,
			"main_name": "TIDRONE",
			"aliases": [],
			"source_name": "ETDA:TIDRONE",
			"tools": [
				"CLNTEND",
				"CXCLNT"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434480,
	"ts_updated_at": 1775826706,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/421c7a4e758bae3db0483281534126ccb2439ccf.pdf",
		"text": "https://archive.orkl.eu/421c7a4e758bae3db0483281534126ccb2439ccf.txt",
		"img": "https://archive.orkl.eu/421c7a4e758bae3db0483281534126ccb2439ccf.jpg"
	}
}