Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 15:36:31 UTC
Home > List all groups > List all tools > List all groups using tool GraphSteel
 Tool: GraphSteel
Names
GraphSteel
Elephant Client
Category Malware
Type Reconnaissance, Backdoor, Credential stealer
Description
(SOC Investigation) GraphSteel features:
• Gather hostname, username, and IP address information
• Execute commands
• Steal account credentials
• Use WebSocket and GraphQL to communicate with C2 using AES and base64 encryption
Information
Malpedia Last change to this tool card: 27 December 2022
Download this tool card in JSON format
All groups using tool GraphSteel
Changed Name Country Observed
APT groups
 SaintBear, Lorec53 2021-Oct 2022
1 group listed (1 APT, 0 other, 0 unknown)
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a332e2dd-65f4-46e9-8138-de9ae3ed7e50
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a332e2dd-65f4-46e9-8138-de9ae3ed7e50
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a332e2dd-65f4-46e9-8138-de9ae3ed7e50
Page 2 of 2