Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 15:56:56 UTC
Home > List all groups > List all tools > List all groups using tool PEBBLEDASH
 Tool: PEBBLEDASH
Names PEBBLEDASH
Category Malware
Type Backdoor
Description
(US-CERT) Working with U.S. Government partners, DHS, FBI, and DoD identified Trojan
malware variants used by the North Korean government. This malware variant has been
identified as PEBBLEDASH.
Information
<https://www.us-cert.gov/ncas/analysis-reports/ar20-133c>
<https://malwarenailed.blogspot.com/2020/06/peebledash-lazarus-hiddencobra-rat.html>
<https://blog.reversinglabs.com/blog/hidden-cobra>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.pebbledash>
Last change to this tool card: 24 April 2021
Download this tool card in JSON format
All groups using tool PEBBLEDASH
Changed Name Country Observed
APT groups
  Lazarus Group, Hidden Cobra, Labyrinth Chollima 2007-May 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=55690b9f-997f-4691-ab73-b6aaef8c961c
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=55690b9f-997f-4691-ab73-b6aaef8c961c
Page 1 of 1