Derusbi (9222aa77-922e-43c7-89ad-71067c428fb2)

Derusbi is malware used by multiple Chinese APT groups.^{[Novetta-Axiom]}^{[ThreatConnect Anthem]} Both Windows and Linux variants have been observed.^{[Fidelis Turbo]}

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
APT41 (502223ee-8947-42f8-a532-a3b3da12b7d9)	Tidal Groups	Derusbi (9222aa77-922e-43c7-89ad-71067c428fb2)	Tidal Software	1
Derusbi (9222aa77-922e-43c7-89ad-71067c428fb2)	Tidal Software	Axiom (90f4d3f9-3fe3-4a64-8dc1-172c6d037dca)	Tidal Groups	1
Derusbi (9222aa77-922e-43c7-89ad-71067c428fb2)	Tidal Software	Leviathan (eadd78e3-3b5d-430a-b994-4360b172c871)	Tidal Groups	1
Deep Panda (43f826a1-e8c8-47b8-9b00-38e1b3e4293b)	Tidal Groups	Derusbi (9222aa77-922e-43c7-89ad-71067c428fb2)	Tidal Software	1