{
	"id": "ef3b7d24-aaa4-4a7b-b0d8-c4be50beca8d",
	"created_at": "2026-04-06T00:11:25.283342Z",
	"updated_at": "2026-04-10T03:21:28.032843Z",
	"deleted_at": null,
	"sha1_hash": "653473a33344f8607e0389b764d93894b16b772c",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 29130,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\r\nArchived: 2026-04-05 16:37:59 UTC\r\nDescription(Trend Micro) Developed in 2016, TrickBot is one of the more recent banking Trojans, with many of\r\nits original features inspired by Dyreza (another banking Trojan). Besides targeting a wide array of international\r\nbanks via its webinjects, Trickbot can also steal from Bitcoin wallets.\r\nSome of its other capabilities include harvesting emails and credentials using the Mimikatz tool. Its authors also\r\nshow an ability for constant new features and developments.\r\nTrojan.TrickBot comes in modules accompanied by a configuration file. Each module has a specific task like\r\ngaining persistence, propagation, stealing credentials, encryption, and so on. The C\u0026Cs are set up on hacked\r\nwireless routers.\r\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=1ee83664-1baa-49f4-8056-c9a2d73a9a80\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=1ee83664-1baa-49f4-8056-c9a2d73a9a80\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=1ee83664-1baa-49f4-8056-c9a2d73a9a80"
	],
	"report_names": [
		"listgroups.cgi?u=1ee83664-1baa-49f4-8056-c9a2d73a9a80"
	],
	"threat_actors": [],
	"ts_created_at": 1775434285,
	"ts_updated_at": 1775791288,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/653473a33344f8607e0389b764d93894b16b772c.pdf",
		"text": "https://archive.orkl.eu/653473a33344f8607e0389b764d93894b16b772c.txt",
		"img": "https://archive.orkl.eu/653473a33344f8607e0389b764d93894b16b772c.jpg"
	}
}