Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-02 12:40:57 UTC
Home > List all groups > List all tools > List all groups using tool RADIOSTAR
 Tool: RADIOSTAR
Names RADIOSTAR
Category Malware
Type Backdoor
Description
(FireEye) RADIOSTAR is a PowerShell backdoor that XOR-decodes and runs different
PowerShell commands received from the C&C server.
Information <https://content.fireeye.com/web-assets/rpt-unc1151-ghostwriter-update>
Last change to this tool card: 15 May 2021
Download this tool card in JSON format
All groups using tool RADIOSTAR
Changed Name Country Observed
APT groups
  Operation Ghostwriter 2017-Jan 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=58ee20e3-26c2-4752-a070-4ae4b6873646
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=58ee20e3-26c2-4752-a070-4ae4b6873646
Page 1 of 1