{
	"id": "da62e893-5ec4-414d-8f57-be14fac37e08",
	"created_at": "2026-04-06T01:29:53.428736Z",
	"updated_at": "2026-04-10T03:30:14.863765Z",
	"deleted_at": null,
	"sha1_hash": "ab3f91ee164120a5ed396f5b0673acff63b9d0b9",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 45084,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\r\nArchived: 2026-04-06 00:11:12 UTC\r\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool IE PassView\r\n Tool: IE PassView\r\nNames IE PassView\r\nCategory Tools\r\nType Credential stealer\r\nDescription\r\nIE PassView is a small utility that reveals the passwords stored by Internet Explorer Web\r\nbrowser. It supports all versions of Internet Explorer, from version 4.0 and up to 11.0, as well\r\nas Microsoft Edge Browser.\r\nFor each password that is stored by Internet Explorer, the following information is displayed:\r\nWeb address, Password Type (AutoComplete, Password-Protected Web Site, or FTP), Storage\r\nLocation (Registry, Credentials File, or Protected Storage), and the user name/password pair.\r\nYou can select one or more items from the passwords list and export them into\r\ntext/html/csv/xml file.\r\nIE PassView also allows you to extract the passwords of Internet Explorer and Microsoft Edge\r\nfrom external hard drive.\r\nInformation \u003chttps://www.nirsoft.net/utils/internet_explorer_password.html\u003e\r\nLast change to this tool card: 19 October 2020\r\nDownload this tool card in JSON format\r\nAll groups using tool IE PassView\r\nChanged Name Country Observed\r\nAPT groups\r\n  XDSpy [Unknown] 2011-Jul 2024  \r\n1 group listed (1 APT, 0 other, 0 unknown)\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=01069967-74df-4230-a9f0-ce957f91e1c3\r\nPage 1 of 2\n\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=01069967-74df-4230-a9f0-ce957f91e1c3\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=01069967-74df-4230-a9f0-ce957f91e1c3\r\nPage 2 of 2\n\nAPT groups  XDSpy [Unknown] 2011-Jul 2024 \n1 group listed (1 APT, 0 other, 0 unknown) \n   Page 1 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=01069967-74df-4230-a9f0-ce957f91e1c3"
	],
	"report_names": [
		"listgroups.cgi?u=01069967-74df-4230-a9f0-ce957f91e1c3"
	],
	"threat_actors": [
		{
			"id": "69cba9ab-de35-4103-a699-7d243bcfd196",
			"created_at": "2023-01-06T13:46:39.159472Z",
			"updated_at": "2026-04-10T02:00:03.233731Z",
			"deleted_at": null,
			"main_name": "XDSpy",
			"aliases": [],
			"source_name": "MISPGALAXY:XDSpy",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "d69b3831-de95-42c9-b4b6-26232627206f",
			"created_at": "2022-10-25T16:07:24.429466Z",
			"updated_at": "2026-04-10T02:00:04.985102Z",
			"deleted_at": null,
			"main_name": "XDSpy",
			"aliases": [],
			"source_name": "ETDA:XDSpy",
			"tools": [
				"ChromePass",
				"IE PassView",
				"MailPassView",
				"Network Password Recovery",
				"OperaPassView",
				"PasswordFox",
				"Protected Storage PassView",
				"XDDown",
				"XDList",
				"XDLoc",
				"XDMonitor",
				"XDPass",
				"XDRecon",
				"XDUpload"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775438993,
	"ts_updated_at": 1775791814,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/ab3f91ee164120a5ed396f5b0673acff63b9d0b9.pdf",
		"text": "https://archive.orkl.eu/ab3f91ee164120a5ed396f5b0673acff63b9d0b9.txt",
		"img": "https://archive.orkl.eu/ab3f91ee164120a5ed396f5b0673acff63b9d0b9.jpg"
	}
}