Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 15:39:57 UTC Home > List all groups > List all tools > List all groups using tool BEATDROP Tool: BEATDROP Names BEATDROP Category Malware Type Downloader Description (Mandiant) BEATDROP is a downloader written in C that makes use of Trello for C2. Once executed, BEATDROP first maps its own copy of `ntdll.dll` into memory for the purpose of executing shellcode in its own process. BEATDROP first creates a suspended thread with RtlCreateUserThread which points to NtCreateFile. Information Malpedia Last change to this tool card: 22 June 2023 Download this tool card in JSON format All groups using tool BEATDROP Changed Name Country Observed APT groups   APT 29, Cozy Bear, The Dukes 2008-Feb 2025 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4ddb55da-9631-4eb5-972d-a1627d807f46 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4ddb55da-9631-4eb5-972d-a1627d807f46 Page 1 of 1