Home > List all groups > List all tools > List all groups using tool PINEGROVE

Threat Group Cards: A Threat Actor Encyclopedia

Names	PINEGROVE
Category	Malware
Type	Exfiltration
Description	(Mandiant) During the intrusion, Mandiant observed APT41 leveraging PINEGROVE for their data exfiltration. PINEGROVE is a command-line uploader written in Go with functionality to collect and upload a file to OneDrive via the OneDrive API. PINEGROVE expects an authentication JSON file including relevant OneDrive credentials and the target file to upload.
Information	<https://cloud.google.com/blog/topics/threat-intelligence/apt41-arisen-from-dust>
Malpedia	<https://malpedia.caad.fkie.fraunhofer.de/details/win.pinegrove>

Last change to this tool card: 27 December 2024

Download this tool card in JSON format

1 group listed (1 APT, 0 other, 0 unknown)

APT groups