Pulse Detail — Threat Intelligence

PULSE NAME

Cuckoo Threat Actor Arsenal

WHITE APT10 AlienVault 2024-10-07 Modified: 2024-10-07

IOCs

MEDIUM VOLUME

This report delves into the technical aspects of the NOOPDOOR and NOOPLDR malwares employed by the APT10 threat actor in the Cuckoo Spear campaign. The analysis reveals how these tools operate and the potential risks they pose, helping cybersecurity professionals better understand and defend against this persistent adversary's sophisticated strategies.

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1569 T1570 T1573 T1574 T1546 T1047 T1053 T1568 T1543 T1562 T1190 T1566 T1127 T1112

MALWARE FAMILIES

NOOPDOOR NOOPLDR

Indicators of Compromise (1 / 25 total)

All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-SHA256	93af6afb47f4c42bc0da3eedc6ecb9054134f4a47ef0add0d285404984011072	—	2024-10-07

References (1)

↗ https://www.cybereason.com/blog/cuckoo-spear-pt2-threat-actor-arsenal