threat actor

MUSTANG PANDA

unknownentity:threat_actor

This threat actor targets nongovernmental organizations using Mongolian-themed lures for espionage purposes.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: mustang-panda
kind: threat actor
status: unknown
aliases: BASIN · BASIN CASTLE · BRONZE PRESIDENT · Camaro Dragon · CAMARO DRAGON · ClumsyToad · Earth Preta · EARTH PRETA · FIREANT · Hive0154 · HIVE0154 · HoneyMyte · ITG27 · LuminousMoth · LUMINOUS MOTH · Polaris · RedDelta · Red Lich · Stately Taurus · STATELY TAURUS · TA416 · TANTALUM · TEMP.Hex · TEMP.HEX · Twill Typhoon · TWILL TYPHOON · UNC6384 · UNK_SteadySplit · Vertigo Panda
jurisdictions: —
claims naming it: 0 · 0 attributions · 18 relations · 0 events

Identifiers

attack G0129via mitre-attack
misp-galaxy 78bf726c-a9e6-11e8-9e43-77249a2f7339via misp-galaxy-threat-actor
misp-galaxy 9ee446fd-b0cd-4662-9cd1-a60b429192dbvia misp-galaxy-threat-actor
misp-galaxy a3e4a57e-4b50-4bca-9282-3307e92e5539via misp-galaxy-threat-actor
misp-galaxy fceed509-938e-4f9e-acd4-76e6c28dc6f1via misp-galaxy-threat-actor

Relations

MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesCANONSTAGER
fetch —sha256 dc1639caa5501d72
rel_195btcintel:relations:195@v1 sha256:938ca6aa7be6dbee
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesSTATICPLUGIN
fetch —sha256 dc1639caa5501d72
rel_196btcintel:relations:196@v1 sha256:72212066145306d6
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesShadowPad
fetch —sha256 dc1639caa5501d72
rel_197btcintel:relations:197@v1 sha256:a6da510a1eb0b8bf
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesTONESHELL
fetch —sha256 dc1639caa5501d72
rel_198btcintel:relations:198@v1 sha256:97286021bbe69980
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesCobalt Strike
fetch —sha256 dc1639caa5501d72
rel_199btcintel:relations:199@v1 sha256:372bac5648da0b59
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesHIUPAN
fetch —sha256 dc1639caa5501d72
rel_200btcintel:relations:200@v1 sha256:e9def46608921200
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesSplatCloak
fetch —sha256 dc1639caa5501d72
rel_201btcintel:relations:201@v1 sha256:c365b102cbb32853
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesPAKLOG
fetch —sha256 dc1639caa5501d72
rel_202btcintel:relations:202@v1 sha256:bcb4a4f2bbde1eb7
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesCLAIMLOADER
fetch —sha256 dc1639caa5501d72
rel_203btcintel:relations:203@v1 sha256:bd53ff4c08772f62
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesPUBLOAD
fetch —sha256 dc1639caa5501d72
rel_204btcintel:relations:204@v1 sha256:23511270308e5ba0
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesStarProxy
fetch —sha256 dc1639caa5501d72
rel_205btcintel:relations:205@v1 sha256:c0185d232ef3980e
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesCorKLOG
fetch —sha256 dc1639caa5501d72
rel_206btcintel:relations:206@v1 sha256:5c2bd527e5598114
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesRCSession
fetch —sha256 dc1639caa5501d72
rel_207btcintel:relations:207@v1 sha256:2553cf3aefa3a8b7
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesPoisonIvy
fetch —sha256 dc1639caa5501d72
rel_208btcintel:relations:208@v1 sha256:73b88698f8b5834d
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesSplatDropper
fetch —sha256 dc1639caa5501d72
rel_209btcintel:relations:209@v1 sha256:ad74fa387af073d0
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesBOOKWORM
fetch —sha256 dc1639caa5501d72
rel_210btcintel:relations:210@v1 sha256:2936564f38c30126
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesChina Chopper
fetch —sha256 dc1639caa5501d72
rel_211btcintel:relations:211@v1 sha256:a3037e7bf5b9e3a9
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMUSTANG PANDAusesPlugX
fetch —sha256 dc1639caa5501d72
rel_212btcintel:relations:212@v1 sha256:c1856381d24f69d4
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.