Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 18:18:25 UTC
Home > List all groups > List all tools > List all groups using tool Pay2Key
 Tool: Pay2Key
Names
Pay2Key
Cobalt
Category Malware
Type Ransomware
Description
(ClearSkySec) The ransomware is written in C++. Exceptionally, as other ransomware
groups encrypt their ransomware files or at least obfuscate internal strings to make
analysis more difficult, Pay2Key executable is unpacked and strings can be seen in clear
text.
Information MITRE ATT&CK Malpedia Last change to this tool card: 01 January 2023
Download this tool card in JSON format
All groups using tool Pay2Key
Changed Name Country Observed
APT groups
 Parisite, Fox Kitten, Pioneer Kitten 2017-Nov 2020
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=137c6319-b665-464b-b895-8c2346c8d9b4
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=137c6319-b665-464b-b895-8c2346c8d9b4
Page 1 of 1