Malware: pngdowner

Description

[pngdowner](https://attack.mitre.org/software/S0067) is malware used by [Putter Panda](https://attack.mitre.org/groups/G0024). It is a simple tool with limited functionality and no persistence mechanism, suggesting it is used only as a simple "download-and- execute" utility. (Citation: CrowdStrike Putter Panda)

External References

• mitre-attack
• CrowdStrike Putter Panda

Techniques Used by This Malware

• T1070.004 — File Deletion
• T1071.001 — Web Protocols
• T1552.001 — Credentials In Files

APT Groups Using This Malware

• Putter Panda