Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 18:48:10 UTC
Home > List all groups > List all tools > List all groups using tool Dudell
 Tool: Dudell
Names Dudell
Category Malware
Type Loader
Description
(Palo Alto) The DUDELL sample is a weaponized Microsoft Excel document that
contains a malicious macro that runs on the victim’s machine. It shares the same
malicious behavior reported by Checkpoint in Rancor: The Year of The Phish SHA-1
c829f5f9ff89210c888c1559bb085ec6e65232de. In Check Point’s blog, the sample is from
December 2018 while this sample is from April 2018.
Information
AlienVault OTX Last change to this tool card: 01 May 2020
Download this tool card in JSON format
All groups using tool Dudell
Changed Name Country Observed
APT groups
 Rancor 2017
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8c55a347-f45c-4a6a-a9a5-4e5387c01313
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8c55a347-f45c-4a6a-a9a5-4e5387c01313
Page 1 of 1