MITRE ATT&CKgroup
G0024 Putter Panda
- Domain
- enterprise
- Aliases
- APT2, MSUpdater
- Version
- 1.2
- Created
- 2017-05-31
Description
Putter Panda is a Chinese threat group that has been attributed to Unit 61486 of the 12th Bureau of the PLA’s 3rd General Staff Department (GSD).
Related
Uses · MITRE ATT&CK (8)
- T1685 Disable or Modify Tools technique
- T1027.013 Encrypted/Encoded File sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1055.001 Dynamic-link Library Injection sub-technique
- S0065 4H RAT software (malware)
- S0066 3PARA RAT software (malware)
- S0067 pngdowner software (malware)
- S0068 httpclient software (malware)
References
- http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf CrowdStrike Putter Panda
- https://blogs.blackberry.com/en/2016/01/puttering-into-the-future Cylance Putter Panda