Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 13:11:02 UTC
Home > List all groups > List all tools > List all groups using tool ZoxRPC
 Tool: ZoxRPC
Names
ZoxRPC
Zox
ZoxPNG
Gresim
Category Malware
Type Backdoor
Description
(Novetta) The sample, known as ZoxRPC, has a compile date of 11 July 2008 at
04:28:21, placing it nearly 5 years ahead of the known BlackCoffee (ZoxPNG) samples.
Given the large time differential between ZoxRPC and ZoxPNG, making a direct
relationship between the two generations is difficult.
Information MITRE ATT&CK Last change to this tool card: 23 April 2024
Download this tool card in JSON format
All groups using tool ZoxRPC
Changed Name Country Observed
APT groups
 APT 17, Deputy Dog, Elderwood, Sneaky Panda 2009-Jun 2024
 Axiom, Group 72 2008-2008/2014
2 groups listed (2 APT, 0 other, 0 unknown)
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=05afaaac-2368-4946-a06b-7ff01498a3f8
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=05afaaac-2368-4946-a06b-7ff01498a3f8
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=05afaaac-2368-4946-a06b-7ff01498a3f8
Page 2 of 2