Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 13:57:28 UTC
Home > List all groups > List all tools > List all groups using tool DARKDEW
 Tool: DARKDEW
Names DARKDEW
Category Malware
Type Dropper
Description
(Mandiant) DARKDEW is a dropper written in C++ that is capable of infecting removable
drives.
Information <https://www.mandiant.com/resources/blog/china-nexus-espionage-southeast-asia>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.darkdew>
Last change to this tool card: 22 June 2023
Download this tool card in JSON format
All groups using tool DARKDEW
Changed Name Country Observed
APT groups
  UNC4191 2022  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=95d7965a-dbcf-4a66-8507-5e1c2af44c39
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=95d7965a-dbcf-4a66-8507-5e1c2af44c39
Page 1 of 1