{
	"id": "4ab3cc40-469d-4be0-b913-c6868d5ded75",
	"created_at": "2026-04-06T00:16:33.782601Z",
	"updated_at": "2026-04-10T03:33:24.134803Z",
	"deleted_at": null,
	"sha1_hash": "a3c881e893d8c9b32c7224edbc2368fc04de8dd1",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 47885,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\r\nArchived: 2026-04-05 17:25:54 UTC\r\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool xkeylog\r\n Tool: xkeylog\r\nNames xkeylog\r\nCategory Malware\r\nType Keylogger\r\nDescription\r\n(Bitdefender) The xkeylog keylogger, named after its very frequent export name, can collect\r\nkeystrokes on the target machine. It was identified in many forms, such as DLL files and\r\nshellcode payloads.\r\nInformation\r\n\u003chttps://blogapp.bitdefender.com/labs/content/files/2024/05/Bitdefender-Report-DeepDive-creat7721-en_EN.pdf\u003e\r\nLast change to this tool card: 18 June 2024\r\nDownload this tool card in JSON format\r\nAll groups using tool xkeylog\r\nChanged Name Country Observed\r\nAPT groups\r\n  Unfading Sea Haze 2018  \r\n1 group listed (1 APT, 0 other, 0 unknown)\r\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=ef45c230-7e52-49b9-aa1f-4245976cacf7\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=ef45c230-7e52-49b9-aa1f-4245976cacf7\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=ef45c230-7e52-49b9-aa1f-4245976cacf7"
	],
	"report_names": [
		"listgroups.cgi?u=ef45c230-7e52-49b9-aa1f-4245976cacf7"
	],
	"threat_actors": [
		{
			"id": "f51de4ba-d3f5-4df7-ab5a-034b32584e48",
			"created_at": "2024-06-20T02:02:10.208158Z",
			"updated_at": "2026-04-10T02:00:04.960754Z",
			"deleted_at": null,
			"main_name": "Unfading Sea Haze",
			"aliases": [],
			"source_name": "ETDA:Unfading Sea Haze",
			"tools": [
				"DustyExfilTool",
				"EtherealGh0st",
				"FluffyGh0st",
				"InsidiousGh0st",
				"Ps2dllLoader",
				"SerialPktdoor",
				"SharpJSHandler",
				"SharpZulip",
				"SilentGh0st",
				"Stubbedoor",
				"TranslucentGh0st",
				"xkeylog"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "cd48e0e6-b206-478d-bcb4-198be54bdf7a",
			"created_at": "2024-06-07T02:00:04.002734Z",
			"updated_at": "2026-04-10T02:00:03.644376Z",
			"deleted_at": null,
			"main_name": "Unfading Sea Haze",
			"aliases": [],
			"source_name": "MISPGALAXY:Unfading Sea Haze",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434593,
	"ts_updated_at": 1775792004,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/a3c881e893d8c9b32c7224edbc2368fc04de8dd1.pdf",
		"text": "https://archive.orkl.eu/a3c881e893d8c9b32c7224edbc2368fc04de8dd1.txt",
		"img": "https://archive.orkl.eu/a3c881e893d8c9b32c7224edbc2368fc04de8dd1.jpg"
	}
}