APT1

Threat Actors · APT1

· ATT&CK GroupG0006

Comment CrewComment GroupComment Panda

Techniques

Software

Tactics

Aliases

Description

APT1 is a Chinese threat group that has been attributed to the 2nd Bureau of the People’s Liberation Army (PLA) General Staff Department’s (GSD) 3rd Department, commonly known by its Military Unit Cover Designator (MUCD) as Unit 61398. (Citation: Mandiant APT1)

Tactic Coverage

discovery (6)collection (5)resource development (5)lateral movement (2)initial access (2)credential access (1)stealth (1)execution (1)

Techniques Used (23)

T1003.001LSASS Memory

credential access

T1005Data from Local System

collection

T1007System Service Discovery

discovery

T1016System Network Configuration Discovery

discovery

T1021.001Remote Desktop Protocol

lateral movement

Registration Required

Create a free account to access full Threat Actor Techniques

Showing 5 of 23 results

✓ Personal dashboard✓ Track 1 vendor/product✓ 1 keyword alert✓ Weekly digest✓ 1 CSV export/month

Already have an account? Sign in →

Software Used (17)

S0017BISCUITmalware S0025CALENDARmalware S0119Cachedumptool S0026GLOOXMAILmalware S0121Lslsasstool S0002Mimikatztool S0039Nettool S0122Pass-The-Hash Toolkit

References (7)

https://attack.mitre.org/groups/G0006 https://www.fireeye.com/content/dam/fireeye-www/services/pdfs/mandiant-apt1-report.pdf http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf