Pulse Detail — Threat Intelligence

PULSE NAME

Cuckoo Threat Actor Arsenal

WHITE APT10 AlienVault 2024-10-07 Modified: 2024-10-07

IOCs

MEDIUM VOLUME

This report delves into the technical aspects of the NOOPDOOR and NOOPLDR malwares employed by the APT10 threat actor in the Cuckoo Spear campaign. The analysis reveals how these tools operate and the potential risks they pose, helping cybersecurity professionals better understand and defend against this persistent adversary's sophisticated strategies.

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1569 T1570 T1573 T1574 T1546 T1047 T1053 T1568 T1543 T1562 T1190 T1566 T1127 T1112

MALWARE FAMILIES

NOOPDOOR NOOPLDR

Indicators of Compromise (1 / 25 total)

All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-SHA1	ca38f3f51a6739d9606dee27849a31775eb1d871	—	2024-10-07

References (1)

↗ https://www.cybereason.com/blog/cuckoo-spear-pt2-threat-actor-arsenal