Putter Panda
Putter Panda is a Chinese threat group that has been attributed to Unit 61486 of the 12th Bureau of the PLA’s 3rd General Staff Department (GSD).
Properties
- Last source
- MITRE ATT&CK
- STIX ID
- intrusion-set--5ce5392a-3a6c-4e07-9df3-9b6a9159ac45
- In Signal since
- initial import (Sep 2026)
- Retrieved at
- 2026-11-01T12:34:03+00:00
- Origin source
- attack_description
- Type
- intrusion-set
- Origin country
- CN
MITRE ATT&CK Techniques (4)
Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detectio
Adversaries may inject dynamic-link libraries (DLLs) into processes in order to evade process-based defenses as well as possibly elevate privileges. D
Adversaries may encrypt or encode files to obfuscate strings, bytes, and other specific patterns to impede detection. Encrypting and/or encoding file
Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run key
Software & Tools (4)
3PARA RAT is a remote access tool (RAT) programmed in C++ that has been used by [Putter Panda](https://atta
4H RAT is malware that has been used by Putter Panda since at leas
httpclient is malware used by Putter Panda. It is a simple tool th
pngdowner is malware used by Putter Panda. It is a simple tool wit
Explore this actor's full graph with Ninja Signal