Home/Malware/pngdowner
Malware

pngdowner

S0067 · Windows

pngdowner is malware used by Putter Panda. It is a simple tool with limited functionality and no persistence mechanism, suggesting it is used only as a simple "download-and- execute" utility.

ATT&CK S0067 Malware family
Sigma rules0 YARA rules0 Live IOCs0

Techniques Used

3
ATT&CK techniques this malware is documented performing. Each links to its detections - Sigma, vendor SIEM rules, and analytics - so you catch the behaviour even when the binary changes.

Live Indicators

Indicators are defanged for safe handling. Newest first.
Aliases
pngdowner
External lookups - second-class, for what we don’t hold ourselves