Zeus Panda
Software · ATTACK:enterprise:S0330
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0330",
"title": "Zeus Panda",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0330",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--198db886-47af-4f4c-bff5-11b891f85946",
"external_id": "S0330",
"domain": "enterprise",
"created": "2019-01-29T17:59:43.600Z",
"modified": "2024-04-10T20:31:00.234Z",
"version": "1.4",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Zeus Panda"
},
{
"source_name": "Talos Zeus Panda Nov 2017",
"url": "https://blog.talosintelligence.com/2017/11/zeus-panda-campaign.html#More"
},
{
"source_name": "GDATA Zeus Panda June 2017",
"url": "https://cyberwtf.files.wordpress.com/2017/07/panda-whitepaper.pdf"
}
]
}Explicit source assertions (23)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1056.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--01e4bf9a-3d9c-4381-aa9c-cca73376c771
GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1059.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0b77fa58-6fd7-4002-955e-e3e1705d54c2
Talos Zeus Panda Nov 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--19f93e6a-a481-4f72-856a-879742a654e4
Talos Zeus Panda Nov 2017 · GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--39f3e098-ca5d-4dc4-9cbb-bc29148def30
GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1113
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4ab6eb52-821c-45da-b7d9-63840fe657cf
GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4c0f441f-13b1-4b79-b658-e081d5143a94
GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1059
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9317c15e-44ae-4d00-9f2b-ad1b07ff52b5
GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9494b0d8-26d9-48ae-8dd1-c9d8966b23a0
GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1614.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a5cbd480-0147-4e70-9551-03a2b5b8fdcb
Talos Zeus Panda Nov 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a9a0ecce-239c-4666-94e9-ef1fb64cf796
GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b3d3ab9f-03db-4982-b60e-9f7f224f1fc2
Talos Zeus Panda Nov 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ba8900d2-1a18-4f44-916d-08b93dc74d9c
GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bc9a5286-98a6-4905-b4ce-8f4d958861b6
Talos Zeus Panda Nov 2017 · GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1027.010
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bfbde4cb-a8e5-4e55-8700-7d25b17ecad1
Talos Zeus Panda Nov 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cbbfb291-9c39-4fab-a2ac-c1f076c7c367
GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1115
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ce378e64-5802-4751-8b8e-d7bf68ce4c6a
GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d18d7fab-1f10-4b83-83e1-a288ec4db2bd
GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1055.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--da69efe7-e99e-4d79-a455-c59f4c087b22
GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dac8dcfd-e7e7-4b41-b100-07f95f6b0ba9
Talos Zeus Panda Nov 2017 · GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1547.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--db6220f4-9e1c-487c-9b8d-e016565817e3
Talos Zeus Panda Nov 2017 · GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1056.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--df0784ed-8411-4215-bebc-51c6ac3bf5df
GDATA Zeus Panda June 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e6aed3c5-9f4a-4178-b03b-5805b2f61c81
Talos Zeus Panda Nov 2017ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e8906575-d90c-4d56-9fb7-bba3560bbeba
GDATA Zeus Panda June 2017