MITRE ATT&CKgroup

G0006 APT1

Published 2017-05-31 Modified 2026-07-31 Official page ↗
Domain
enterprise
Aliases
Comment Crew, Comment Group, Comment Panda
Version
1.4
Created
2017-05-31

Description

APT1 is a Chinese threat group that has been attributed to the 2nd Bureau of the People’s Liberation Army (PLA) General Staff Department’s (GSD) 3rd Department, commonly known by its Military Unit Cover Designator (MUCD) as Unit 61398.

Related

Uses · MITRE ATT&CK (40)

  • T1584.001 Domains sub-technique
  • T1585.002 Email Accounts sub-technique
  • T1588.001 Malware sub-technique
  • T1588.002 Tool sub-technique
  • T1583.001 Domains sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1566.001 Spearphishing Attachment sub-technique
  • T1566.002 Spearphishing Link sub-technique
  • T1087.001 Local Account sub-technique
  • T1560.001 Archive via Utility sub-technique
  • T1114.001 Local Email Collection sub-technique
  • T1114.002 Remote Email Collection sub-technique
  • T1003.001 LSASS Memory sub-technique
  • T1021.001 Remote Desktop Protocol sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1550.002 Pass the Hash sub-technique
  • S0345 Seasalt software (malware)
  • T1135 Network Share Discovery technique
  • S0002 Mimikatz software (tool)
  • S0006 pwdump software (tool)
  • S0008 gsecdump software (tool)
  • S0012 PoisonIvy software (malware)
  • S0017 BISCUIT software (malware)
  • S0025 CALENDAR software (malware)
  • S0026 GLOOXMAIL software (malware)
  • S0029 PsExec software (tool)
  • S0039 Net software (tool)
  • S0057 Tasklist software (tool)
  • S0100 ipconfig software (tool)
  • S0109 WEBC2 software (malware)
Show all 40 ›

References