{
	"id": "38948d5a-9e80-450a-bdb6-d271cbaca33d",
	"created_at": "2026-04-06T00:09:00.395647Z",
	"updated_at": "2026-04-10T03:35:17.050604Z",
	"deleted_at": null,
	"sha1_hash": "a371ee73e3efd7fdf50285c9870c520876b0b095",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 56537,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 14:04:32 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool MarkiRAT\n Tool: MarkiRAT\nNames MarkiRAT\nCategory Malware\nType Backdoor, Info stealer, Keylogger, Credential stealer, Downloader, Exfiltration\nDescription\n(Kaspersky) The malware dropped from the aforementioned document is dubbed\nMarkiRAT and is used to record keystrokes and clipboard content, provide file\ndownload and upload capabilities as well as the ability to execute arbitrary commands\non the victim’s machine.\nInformation\nMITRE ATT\u0026CK Malpedia Last change to this tool card: 30 December 2022\nDownload this tool card in JSON format\nAll groups using tool MarkiRAT\nChanged Name Country Observed\nAPT groups\n Ferocious Kitten 2015\n1 group listed (1 APT, 0 other, 0 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6904a308-0f84-407e-863d-7eaca9f00b84\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6904a308-0f84-407e-863d-7eaca9f00b84\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6904a308-0f84-407e-863d-7eaca9f00b84"
	],
	"report_names": [
		"listgroups.cgi?u=6904a308-0f84-407e-863d-7eaca9f00b84"
	],
	"threat_actors": [
		{
			"id": "4a1e62ec-42d0-47c3-8b65-b3c5d9c496c0",
			"created_at": "2022-10-25T16:07:23.609046Z",
			"updated_at": "2026-04-10T02:00:04.686029Z",
			"deleted_at": null,
			"main_name": "Ferocious Kitten",
			"aliases": [
				"G0137"
			],
			"source_name": "ETDA:Ferocious Kitten",
			"tools": [
				"MarkiRAT"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "75297180-4681-4500-ad0e-cde0edeb1ed2",
			"created_at": "2024-02-06T02:00:04.156486Z",
			"updated_at": "2026-04-10T02:00:03.581217Z",
			"deleted_at": null,
			"main_name": "Ferocious Kitten",
			"aliases": [],
			"source_name": "MISPGALAXY:Ferocious Kitten",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "306b00c6-fec4-4698-86c5-2aed9feedd38",
			"created_at": "2022-10-25T15:50:23.444155Z",
			"updated_at": "2026-04-10T02:00:05.401052Z",
			"deleted_at": null,
			"main_name": "Ferocious Kitten",
			"aliases": [
				"Ferocious Kitten"
			],
			"source_name": "MITRE:Ferocious Kitten",
			"tools": [
				"MarkiRAT",
				"BITSAdmin"
			],
			"source_id": "MITRE",
			"reports": null
		}
	],
	"ts_created_at": 1775434140,
	"ts_updated_at": 1775792117,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/a371ee73e3efd7fdf50285c9870c520876b0b095.pdf",
		"text": "https://archive.orkl.eu/a371ee73e3efd7fdf50285c9870c520876b0b095.txt",
		"img": "https://archive.orkl.eu/a371ee73e3efd7fdf50285c9870c520876b0b095.jpg"
	}
}