Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 12:49:20 UTC
Home > List all groups > List all tools > List all groups using tool Crackshot
 Tool: Crackshot
Names Crackshot
Category Malware
Type Downloader
Description
CRACKSHOT is a downloader that can download files, including binaries, and run them from
the hard disk or execute them directly in memory. It is also capable of placing itself into a
dormant state.
Information
<https://docplayer.net/161018432-Double-dragon-apt41-a-dual-espionage-and-cyber-crime-operation.html>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.crackshot>
Last change to this tool card: 24 April 2021
Download this tool card in JSON format
All groups using tool Crackshot
Changed Name Country Observed
APT groups
  APT 41 2012-Jul 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=bdccb206-8548-4726-83df-092c6024c52b
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=bdccb206-8548-4726-83df-092c6024c52b
Page 1 of 1