PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)

PoisonIvy is a popular remote access tool (RAT) that has been used by many groups.^{[FireEye Poison Ivy]}^{[Symantec Elderwood Sept 2012]}^{[Symantec Darkmoon Aug 2005]}

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Elderwood (51146bb6-7478-44a3-8f08-19adcdceffca)	Tidal Groups	PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)	Tidal Software	1
PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)	Tidal Software	menuPass (fb93231d-2ae4-45da-9dea-4c372a11f322)	Tidal Groups	1
PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)	Tidal Software	admin@338 (8567136b-f84a-45ed-8cce-46324c7da60e)	Tidal Groups	1
PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)	Tidal Software	Tropic Trooper (0a245c5e-c1a8-480f-8655-bb2594e3266b)	Tidal Groups	1
Moafee (4510ce41-27b9-479c-9bf3-a328b77bae29)	Tidal Groups	PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)	Tidal Software	1
APT20 (4173c301-0307-458d-89dd-2583e94247ec)	Tidal Groups	PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)	Tidal Software	1
PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)	Tidal Software	Molerats (679b7b6b-9659-4e56-9ffd-688a6fab01b6)	Tidal Groups	1
PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)	Tidal Software	IndigoZebra (988f5312-834e-48ea-93b7-e6e01ee0938d)	Tidal Groups	1
Axiom (90f4d3f9-3fe3-4a64-8dc1-172c6d037dca)	Tidal Groups	PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)	Tidal Software	1
PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)	Tidal Software	GALLIUM (15ff1ce0-44f0-4f1d-a4ef-83444570e572)	Tidal Groups	1
PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)	Tidal Software	PittyTiger (60936d3c-37ed-4116-a407-868da3aa4446)	Tidal Groups	1
PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)	Tidal Software	APT1 (5307bba1-2674-4fbd-bfd5-1db1ae06fc5f)	Tidal Groups	1
PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)	Tidal Software	Mustang Panda (4a4641b1-7686-49da-8d83-00d8013f4b47)	Tidal Groups	1
PoisonIvy (1d87a695-7989-49ae-ac1a-b6601db565c3)	Tidal Software	DragonOK (f2c2db08-624c-46b9-b7ed-b22c21b81813)	Tidal Groups	1