SHOTPUT

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[SHOTPUT](https://attack.mitre.org/software/S0063) is a custom backdoor used by [APT3](https://attack.mitre.org/groups/G0022). (Citation: FireEye Clandestine Wolf)

Associated Techniques (6)
ID ATT&CK Tactics
T1018 Remote System Discovery -
T1027 Obfuscated Files or Information -
T1049 System Network Connections Discovery -
T1057 Process Discovery -
T1083 File and Directory Discovery -
T1087.001 Local Account -
Aliases (388)
Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi Backdoor.APT.CookieCutter Pirpi
Used by Actors (1)
APT3
Nation-state
Metadata
ID: 252
Created: 13/01/2026 17:48
Updated: 20/04/2026 16:00