APT1 G0006

Também conhecido como: Comment Crew, Comment Group, Comment Panda

Atualizado na fonte em 31/07/2026 · Ver no MITRE ATT&CK

CVEs associadas

Técnicas

Malwares e ferramentas

APT1 is a Chinese threat group that has been attributed to the 2nd Bureau of the People’s Liberation Army (PLA) General Staff Department’s (GSD) 3rd Department, commonly known by its Military Unit Cover Designator (MUCD) as Unit 61398.

Vulnerabilidades exploradas

CVEs citadas pelo MITRE ATT&CK para este grupo, com o trecho da fonte. Fichas ainda não publicadas aqui aparecem sem link.

O ATT&CK não cita CVEs para este grupo.

Técnicas por tática

Desenvolvimento de recursos

T1583.001 Domains T1584.001 Domains T1585.002 Email Accounts T1588.001 Malware T1588.002 Tool

Acesso inicial

T1566.001 Spearphishing Attachment T1566.002 Spearphishing Link

Execução

T1059.003 Windows Command Shell

Furtividade

T1036.005 Match Legitimate Resource Name or Location

Acesso a credenciais

T1003.001 LSASS Memory

Descoberta

T1007 System Service Discovery T1016 System Network Configuration Discovery T1049 System Network Connections Discovery T1057 Process Discovery T1087.001 Local Account T1135 Network Share Discovery

Movimento lateral

T1021.001 Remote Desktop Protocol T1550.002 Pass the Hash

Coleta

T1005 Data from Local System T1114.001 Local Email Collection T1114.002 Remote Email Collection T1119 Automated Collection T1560.001 Archive via Utility

Malwares e ferramentas

BISCUITMalwareS0017
CALENDARMalwareS0025
GLOOXMAILMalwareS0026
PoisonIvyMalwareS0012
SeasaltMalwareS0345
WEBC2MalwareS0109
CachedumpFerramentaS0119
gsecdumpFerramentaS0008
ipconfigFerramentaS0100
LslsassFerramentaS0121
MimikatzFerramentaS0002
NetFerramentaS0039
Pass-The-Hash ToolkitFerramentaS0122
PsExecFerramentaS0029
pwdumpFerramentaS0006
TasklistFerramentaS0057
xCmdFerramentaS0123