APT12

Threat Actors · APT12

· ATT&CK GroupG0005

IXESHEDynCalcNumbered PandaDNSCALC

Techniques

Software

Tactics

Aliases

Description

APT12 is a threat group that has been attributed to China. The group has targeted a variety of victims including but not limited to media outlets, high-tech companies, and multiple governments.(Citation: Meyers Numbered Panda)

Tactic Coverage

command and control (2)execution (2)initial access (1)

Techniques Used (5)

T1102.002Bidirectional Communication

command and control

T1203Exploitation for Client Execution

execution

T1204.002Malicious File

execution

T1566.001Spearphishing Attachment

initial access

T1568.003DNS Calculation

command and control

Software Used (3)

S0040HTRANtool S0015Ixeshemalware S0003RIPTIDEmalware

References (8)

https://attack.mitre.org/groups/G0005 http://www.crowdstrike.com/blog/whois-numbered-panda/https://www.fireeye.com/blog/threat-research/2014/09/darwins-favorite-apt-group-2.html