APT1

MISP
Type:
Nation-state
Country:
CN
First seen:
Unknown
Details:

[APT1](https://attack.mitre.org/groups/G0006) is a Chinese threat group that has been attributed to the 2nd Bureau of the People’s Liberation Army (PLA) General Staff Department’s (GSD) 3rd Department, commonly known by its Military Unit Cover Designator (MUCD) as Unit 61398. (Citation: Mandiant APT1)

MITRE ATT&CK: View on MITRE
Techniques Used (23)
ID ATT&CK Tactics
T1003.001 LSASS Memory -
T1005 Data from Local System -
T1007 System Service Discovery -
T1016 System Network Configuration Discovery -
T1021.001 Remote Desktop Protocol -
T1036.005 Match Legitimate Resource Name or Location -
T1049 System Network Connections Discovery -
T1057 Process Discovery -
T1059.003 Windows Command Shell -
T1087.001 Local Account -
T1114.001 Local Email Collection -
T1114.002 Remote Email Collection -
T1119 Automated Collection -
T1135 Network Share Discovery -
T1550.002 Pass the Hash -
Aliases (1445)
COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda COMMENT PANDA PLA Unit 61398 Comment Crew Byzantine Candor Group 3 TG-8223 Comment Group Brown Fox GIF89a ShadyRAT G0006 Comment Crew Comment Group Comment Panda
Metadata
ID: 1
Created: 13/01/2026 17:48
Updated: 06/03/2026 04:00