Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 18:24:10 UTC
Home > List all groups > List all tools > List all groups using tool ODRIZ
 Tool: ODRIZ
Names ODRIZ
Category Malware
Type Exfiltration
Description
(Trend Micro) The other tool, ODRIZ, is an old tool found in 2023. It will upload the collected
files to OneDrive by specifying the OneDrive refresh token.
Information <https://www.trendmicro.com/en_us/research/25/d/earth-kurma-apt-campaign.html>
Last change to this tool card: 27 June 2025
Download this tool card in JSON format
All groups using tool ODRIZ
Changed Name Country Observed
APT groups
  Earth Kurma 2020  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=785fcc42-731a-4c72-866c-250dec5c77c4
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=785fcc42-731a-4c72-866c-250dec5c77c4
Page 1 of 1