{
	"id": "74b3ed7d-e341-4a3e-9fdc-4ded03c4e344",
	"created_at": "2026-04-06T00:17:37.09013Z",
	"updated_at": "2026-04-10T13:11:43.261193Z",
	"deleted_at": null,
	"sha1_hash": "6cf3e5b7cc2ef7e853e4dc32dccc00dc5320851c",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 49566,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 20:41:22 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool Rhadamanthys\n Tool: Rhadamanthys\nNames\nRhadamanthys\nRhadamanthys Stealer\nCategory Malware\nType Info stealer\nDescription\n(The Hacker News) The developers of the information stealer malware known as\nRhadamanthys are actively iterating on its features, broadening its information-gathering\ncapabilities and also incorporating a plugin system to make it more customizable.\nThis approach not only transforms it into a threat capable of delivering 'specific distributor\nneeds,' but also makes it more potent, Check Point said in a technical deep dive published last\nweek.\nInformation\nMalpedia Last change to this tool card: 23 April 2024\nDownload this tool card in JSON format\nAll groups using tool Rhadamanthys\nChanged Name Country Observed\nOther groups\n CoralRaider 2023-Feb 2024\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f5b46b46-172d-4fbd-8b8e-58c4049cba2d\nPage 1 of 2\n\nScully Spider, TA547 [Unknown] 2017-Mar 2024  \r\n2 groups listed (0 APT, 2 other, 0 unknown)\r\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f5b46b46-172d-4fbd-8b8e-58c4049cba2d\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f5b46b46-172d-4fbd-8b8e-58c4049cba2d\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f5b46b46-172d-4fbd-8b8e-58c4049cba2d"
	],
	"report_names": [
		"listgroups.cgi?u=f5b46b46-172d-4fbd-8b8e-58c4049cba2d"
	],
	"threat_actors": [
		{
			"id": "02e5c3b8-54b4-4170-b200-7f1fd361b5a9",
			"created_at": "2022-10-25T16:07:24.557505Z",
			"updated_at": "2026-04-10T02:00:05.032451Z",
			"deleted_at": null,
			"main_name": "Scully Spider",
			"aliases": [
				"Scully Spider",
				"TA547"
			],
			"source_name": "ETDA:Scully Spider",
			"tools": [
				"DanaBot",
				"Lumma Stealer",
				"LummaC2",
				"NetSupport",
				"NetSupport Manager",
				"NetSupport Manager RAT",
				"NetSupport RAT",
				"NetSupportManager RAT",
				"Rhadamanthys",
				"Rhadamanthys Stealer",
				"Stealc"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "6b8c5ea0-a654-4b5c-b817-9e67b115059e",
			"created_at": "2024-04-19T02:00:03.625955Z",
			"updated_at": "2026-04-10T02:00:03.616114Z",
			"deleted_at": null,
			"main_name": "CoralRaider",
			"aliases": [],
			"source_name": "MISPGALAXY:CoralRaider",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "6a894c24-6f51-4863-9efb-7f1b3133c848",
			"created_at": "2024-06-20T02:02:10.260154Z",
			"updated_at": "2026-04-10T02:00:05.001393Z",
			"deleted_at": null,
			"main_name": "CoralRaider",
			"aliases": [],
			"source_name": "ETDA:CoralRaider",
			"tools": [
				"AsyncRAT",
				"LOLBAS",
				"LOLBins",
				"Living off the Land",
				"Lumma Stealer",
				"LummaC2",
				"NetSupport",
				"NetSupport Manager",
				"NetSupport Manager RAT",
				"NetSupport RAT",
				"NetSupportManager RAT",
				"Rhadamanthys",
				"Rhadamanthys Stealer",
				"RotBot",
				"XClient"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "b3070c7b-c1e8-462c-94f1-62a0d2bdbc67",
			"created_at": "2023-01-06T13:46:39.116254Z",
			"updated_at": "2026-04-10T02:00:03.218594Z",
			"deleted_at": null,
			"main_name": "SCULLY SPIDER",
			"aliases": [],
			"source_name": "MISPGALAXY:SCULLY SPIDER",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "72bc3519-a265-4136-b85a-d5e331f085b1",
			"created_at": "2023-01-06T13:46:39.313045Z",
			"updated_at": "2026-04-10T02:00:03.28438Z",
			"deleted_at": null,
			"main_name": "TA547",
			"aliases": [],
			"source_name": "MISPGALAXY:TA547",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434657,
	"ts_updated_at": 1775826703,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/6cf3e5b7cc2ef7e853e4dc32dccc00dc5320851c.pdf",
		"text": "https://archive.orkl.eu/6cf3e5b7cc2ef7e853e4dc32dccc00dc5320851c.txt",
		"img": "https://archive.orkl.eu/6cf3e5b7cc2ef7e853e4dc32dccc00dc5320851c.jpg"
	}
}