{
	"id": "761979e4-78ff-4fb2-aa9a-de08f10e4bcc",
	"created_at": "2026-04-06T00:16:15.714289Z",
	"updated_at": "2026-04-10T03:33:49.483391Z",
	"deleted_at": null,
	"sha1_hash": "4fefe9c79a5fcfea694dc19d7866ba8316933ac2",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 52306,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-02 12:11:41 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool Madi\n Tool: Madi\nNames Madi\nCategory Malware\nType Info stealer\nDescription\n(Kaspersky) The infostealer is installed by one of the various downloaders used in the attacks,\nwhich can be separated into two categories:\n• Downloaders using the social engineering techniques described in our first blog post\n(displaying pictures, movies, documents etc.) to trick the user\n• Downloaders that simply download and install the infostealer\nInformation Last change to this tool card: 20 April 2020\nDownload this tool card in JSON format\nAll groups using tool Madi\nChanged Name Country Observed\nAPT groups\n Madi 2011-Jul 2012\n1 group listed (1 APT, 0 other, 0 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=2de82fde-59d4-4e99-b51a-963078e80927\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=2de82fde-59d4-4e99-b51a-963078e80927\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=2de82fde-59d4-4e99-b51a-963078e80927"
	],
	"report_names": [
		"listgroups.cgi?u=2de82fde-59d4-4e99-b51a-963078e80927"
	],
	"threat_actors": [
		{
			"id": "322a0ef1-136b-400e-89d0-0d62ee2bd319",
			"created_at": "2023-01-06T13:46:38.662109Z",
			"updated_at": "2026-04-10T02:00:03.05924Z",
			"deleted_at": null,
			"main_name": "Madi",
			"aliases": [],
			"source_name": "MISPGALAXY:Madi",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "b07fec96-80cd-4d92-aa52-a26a0b25b7c2",
			"created_at": "2022-10-25T16:07:23.826594Z",
			"updated_at": "2026-04-10T02:00:04.760416Z",
			"deleted_at": null,
			"main_name": "Madi",
			"aliases": [
				"Mahdi"
			],
			"source_name": "ETDA:Madi",
			"tools": [
				"Madi"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434575,
	"ts_updated_at": 1775792029,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/4fefe9c79a5fcfea694dc19d7866ba8316933ac2.pdf",
		"text": "https://archive.orkl.eu/4fefe9c79a5fcfea694dc19d7866ba8316933ac2.txt",
		"img": "https://archive.orkl.eu/4fefe9c79a5fcfea694dc19d7866ba8316933ac2.jpg"
	}
}