Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 20:18:51 UTC
Home > List all groups > List all tools > List all groups using tool MISTCLOAK
 Tool: MISTCLOAK
Names
MISTCLOAK
HIUPAN
Category Malware
Type Loader
Description
(Mandiant) MISTCLOAK is a launcher written in C++ that executes an encrypted executable
payload stored in a file on disk.
Information <https://www.mandiant.com/resources/blog/china-nexus-espionage-southeast-asia>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.mistcloak>
Last change to this tool card: 30 November 2023
Download this tool card in JSON format
All groups using tool MISTCLOAK
Changed Name Country Observed
APT groups
  UNC4191 2022  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6e5870af-2390-4e9f-a178-b4da4b10541c
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6e5870af-2390-4e9f-a178-b4da4b10541c
Page 1 of 1