{
	"id": "b10074ae-0bad-4d50-91bb-1bafa6d1a8ef",
	"created_at": "2026-04-06T00:19:31.540789Z",
	"updated_at": "2026-04-10T03:28:00.448473Z",
	"deleted_at": null,
	"sha1_hash": "f7e2eae4b5a3ca34af8e097f076d0c86b10cc4d5",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 48919,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 16:42:23 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool GravityAdmin\n Tool: GravityAdmin\nNames GravityAdmin\nCategory Malware\nType Control panel\nDescription\n(Talos) A tool to administer infected systems (panel binary), used by operators since at least\n2021, by connecting to GravityRAT’s and HeavyLift’s C2 servers. GravityAdmin consists of\nmultiple inbuilt User Interfaces (UIs) that correspond to specific, codenamed, campaigns being\noperated by malicious operators.\nInformation Last change to this tool card: 19 June 2024\nDownload this tool card in JSON format\nAll groups using tool GravityAdmin\nChanged Name Country Observed\nAPT groups\n Cosmic Leopard, Operation Celestial Force 2018\n1 group listed (1 APT, 0 other, 0 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8bf7e9c1-92e8-40ae-8bbf-7716e2feec5e\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8bf7e9c1-92e8-40ae-8bbf-7716e2feec5e\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8bf7e9c1-92e8-40ae-8bbf-7716e2feec5e"
	],
	"report_names": [
		"listgroups.cgi?u=8bf7e9c1-92e8-40ae-8bbf-7716e2feec5e"
	],
	"threat_actors": [
		{
			"id": "7fc3c743-5f3d-4c30-a388-5937abef3659",
			"created_at": "2024-06-20T02:02:09.693669Z",
			"updated_at": "2026-04-10T02:00:04.630596Z",
			"deleted_at": null,
			"main_name": "Cosmic Leopard",
			"aliases": [
				"Cosmic Leopard",
				"Operation Celestial Force"
			],
			"source_name": "ETDA:Cosmic Leopard",
			"tools": [
				"GravityAdmin",
				"GravityRAT",
				"HeavyLift"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434771,
	"ts_updated_at": 1775791680,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/f7e2eae4b5a3ca34af8e097f076d0c86b10cc4d5.pdf",
		"text": "https://archive.orkl.eu/f7e2eae4b5a3ca34af8e097f076d0c86b10cc4d5.txt",
		"img": "https://archive.orkl.eu/f7e2eae4b5a3ca34af8e097f076d0c86b10cc4d5.jpg"
	}
}