Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 14:27:17 UTC Home > List all groups > List all tools > List all groups using tool SOUNDWAVE Tool: SOUNDWAVE Names SOUNDWAVE Category Malware Type Info stealer Description (FireEye) SOUNDWAVE is a windows based audio capturing utility. Via command line it accepts the -l switch (for listen probably), captures microphone input for 100 minutes, writing the data out to a log file in this format: C:\Temp\HncDownload\YYYYMMDDHHMMSS.log. Information Last change to this tool card: 23 April 2020 Download this tool card in JSON format All groups using tool SOUNDWAVE Changed Name Country Observed APT groups   Reaper, APT 37, Ricochet Chollima, ScarCruft 2012-Mar 2025 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=0088e7a7-3477-4694-be1b-ca840d5c2d01 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=0088e7a7-3477-4694-be1b-ca840d5c2d01 Page 1 of 1