Malware: 3PARA RAT

Description

[3PARA RAT](https://attack.mitre.org/software/S0066) is a remote access tool (RAT) programmed in C++ that has been used by [Putter Panda](https://attack.mitre.org/groups/G0024). (Citation: CrowdStrike Putter Panda)

External References

• mitre-attack
• CrowdStrike Putter Panda

Techniques Used by This Malware

• T1070.006 — Timestomp
• T1071.001 — Web Protocols
• T1083 — File and Directory Discovery
• T1573.001 — Symmetric Cryptography

APT Groups Using This Malware

• Putter Panda