APT2

BedrohungsakteurCN

auch bekannt als

Weitere Namen und Kennungen dieser Entität.

ATT&CK

APT2 · MSUpdater · Putter Panda

MISP

4HCrew · APT2 · MSUpdater · PLA Unit 61486 · PUTTER PANDA · SULPHUR · SearchFire · TG-6952

Putter Panda were the subject of an extensive report by CrowdStrike, which stated: 'The CrowdStrike Intelligence team has been tracking this particular unit since2012, under the codename PUTTER PANDA, and has documented activity dating back to 2007. The report identifies Chen Ping, aka cpyy, and the primary location of Unit 61486.'

zugeordnete ATT&CK-Gruppen

Zugehörige Bedrohungsgruppen.

G0024Putter Panda

genutzte Techniken (4)

ATT&CK-Techniken, die dies ermöglicht oder abbildet.

T1027.013Encrypted/Encoded File
T1055.001Dynamic-link Library Injection
T1547.001Registry Run Keys / Startup Folder
T1685Disable or Modify Tools

genutzte Software (4)

Zugehörige Malware und Tools.

S00663PARA RAT
S00654H RAT
S0068httpclient
S0067pngdowner

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf
https://www.cfr.org/interactive/cyber-operations/putter-panda
https://attack.mitre.org/groups/G0024
https://www.mandiant.com/resources/insights/apt-groups
https://www.fireeye.com/content/dam/fireeye-www/summit/cds-2019/presentations/cds19-executive-s08-achievement-unlocked.pdf