{
	"id": "1f447e9d-32c4-48f8-8ac6-cb60cc0f930d",
	"created_at": "2026-04-06T00:17:37.814565Z",
	"updated_at": "2026-04-10T03:35:34.317843Z",
	"deleted_at": null,
	"sha1_hash": "5258414f9e94f1e29458dd11e9d946c49dd69b7a",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 47161,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 15:51:29 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool psinstrc.ps1\n Tool: psinstrc.ps1\nNames psinstrc.ps1\nCategory Malware\nType Loader\nDescription\n(Kasperky) This is the installer script that registers DvDupdate.dll as the ‘DVDMaker Help’\nservice, and sets its entry point as the DllGetClassObject name. It requires admin privileges to\nbe executed correctly.\nThe script contains configurable parameters, so it’s easy to change any of the required\nparameters for different systems.\nInformation Last change to this tool card: 20 April 2020\nDownload this tool card in JSON format\nAll groups using tool psinstrc.ps1\nChanged Name Country Observed\nAPT groups\n Platinum 2009-Nov 2019\n1 group listed (1 APT, 0 other, 0 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b6592ef2-2f57-47dc-b467-e4d59fa05f70\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b6592ef2-2f57-47dc-b467-e4d59fa05f70\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b6592ef2-2f57-47dc-b467-e4d59fa05f70"
	],
	"report_names": [
		"listgroups.cgi?u=b6592ef2-2f57-47dc-b467-e4d59fa05f70"
	],
	"threat_actors": [
		{
			"id": "7d8ef10e-1d7b-49a0-ab6e-f1dae465a1a4",
			"created_at": "2023-01-06T13:46:38.595679Z",
			"updated_at": "2026-04-10T02:00:03.033762Z",
			"deleted_at": null,
			"main_name": "PLATINUM",
			"aliases": [
				"TwoForOne",
				"G0068",
				"ATK33"
			],
			"source_name": "MISPGALAXY:PLATINUM",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "e61c46f7-88a1-421a-9fed-0cfe2eeb820a",
			"created_at": "2022-10-25T16:07:24.061767Z",
			"updated_at": "2026-04-10T02:00:04.854503Z",
			"deleted_at": null,
			"main_name": "Platinum",
			"aliases": [
				"ATK 33",
				"G0068",
				"Operation EasternRoppels",
				"TwoForOne"
			],
			"source_name": "ETDA:Platinum",
			"tools": [
				"AMTsol",
				"Adupib",
				"Adupihan",
				"Dipsind",
				"DvDupdate.dll",
				"JPIN",
				"LOLBAS",
				"LOLBins",
				"Living off the Land",
				"RedPepper",
				"RedSalt",
				"Titanium",
				"adbupd",
				"psinstrc.ps1"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "33f527a5-a5da-496a-a48c-7807cc858c3e",
			"created_at": "2022-10-25T15:50:23.803657Z",
			"updated_at": "2026-04-10T02:00:05.333523Z",
			"deleted_at": null,
			"main_name": "PLATINUM",
			"aliases": [
				"PLATINUM"
			],
			"source_name": "MITRE:PLATINUM",
			"tools": [
				"JPIN",
				"Dipsind",
				"adbupd"
			],
			"source_id": "MITRE",
			"reports": null
		}
	],
	"ts_created_at": 1775434657,
	"ts_updated_at": 1775792134,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/5258414f9e94f1e29458dd11e9d946c49dd69b7a.pdf",
		"text": "https://archive.orkl.eu/5258414f9e94f1e29458dd11e9d946c49dd69b7a.txt",
		"img": "https://archive.orkl.eu/5258414f9e94f1e29458dd11e9d946c49dd69b7a.jpg"
	}
}