{
	"id": "38ea567c-7358-4f19-a5e2-80b4fe87a000",
	"created_at": "2026-04-06T00:07:07.130577Z",
	"updated_at": "2026-04-10T13:11:30.064765Z",
	"deleted_at": null,
	"sha1_hash": "d309e00c3d301ad30d0261fe4311dfb6566a11c9",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 48816,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 20:07:06 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool FlyingDutchman\n Tool: FlyingDutchman\nNames FlyingDutchman\nCategory Malware\nType Backdoor, Info stealer\nDescription\n(Positive Technologies) The payload provides remote access to the infected computer. It\nincludes functions such as screenshot capture, remote shell, and file system operations. It\nalso allows managing system processes and services. It consists of several modules.\nInformation Malpedia AlienVault OTX Last change to this tool card: 24 April 2021\nDownload this tool card in JSON format\nAll groups using tool FlyingDutchman\nChanged Name Country Observed\nAPT groups\n Calypso 2016-Aug 2021\n1 group listed (1 APT, 0 other, 0 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=3610f065-1e04-4e18-8c31-123f05a69cf0\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=3610f065-1e04-4e18-8c31-123f05a69cf0\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=3610f065-1e04-4e18-8c31-123f05a69cf0"
	],
	"report_names": [
		"listgroups.cgi?u=3610f065-1e04-4e18-8c31-123f05a69cf0"
	],
	"threat_actors": [
		{
			"id": "3c5b0e7e-2388-4b63-9b97-6b027bec4bf7",
			"created_at": "2023-01-06T13:46:39.068694Z",
			"updated_at": "2026-04-10T02:00:03.202867Z",
			"deleted_at": null,
			"main_name": "Calypso",
			"aliases": [
				"BRONZE MEDLEY"
			],
			"source_name": "MISPGALAXY:Calypso",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "13d9c5fc-af82-4474-90dd-188c4e40a399",
			"created_at": "2022-10-25T16:07:23.435079Z",
			"updated_at": "2026-04-10T02:00:04.601572Z",
			"deleted_at": null,
			"main_name": "Calypso",
			"aliases": [
				"Bronze Medley"
			],
			"source_name": "ETDA:Calypso",
			"tools": [
				"Agent.dhwf",
				"Byeby",
				"Calypso RAT",
				"DCSync",
				"Destroy RAT",
				"DestroyRAT",
				"DoublePulsar",
				"EternalBlue",
				"EternalRomance",
				"FlyingDutchman",
				"Kaba",
				"Korplug",
				"LOLBAS",
				"LOLBins",
				"Living off the Land",
				"Mimikatz",
				"NBTscan",
				"OS_Check_445",
				"PlugX",
				"Quarks PwDump",
				"RedDelta",
				"SAMRID",
				"Sogu",
				"SysInternals",
				"TCP Port Scanner",
				"TIGERPLUG",
				"TVT",
				"Thoper",
				"Whitebird",
				"Xamtrav",
				"ZXPortMap",
				"nbtscan",
				"netcat"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434027,
	"ts_updated_at": 1775826690,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/d309e00c3d301ad30d0261fe4311dfb6566a11c9.pdf",
		"text": "https://archive.orkl.eu/d309e00c3d301ad30d0261fe4311dfb6566a11c9.txt",
		"img": "https://archive.orkl.eu/d309e00c3d301ad30d0261fe4311dfb6566a11c9.jpg"
	}
}