G0129 - Mustang Panda

Mustang Panda is a China-based cyber espionage threat actor that was first observed in 2017 but may have been conducting operations since at least 2014. Mustang Panda has targeted government entities, nonprofits, religious, and other non-governmental organizations in the U.S., Europe, Mongolia, Myanmar, Pakistan, and Vietnam, among others.

Author
agomez
Created
2023-08-14 15:34:56
Last updated
2026-02-07 19:01:54
Downloads
314358
Hostname indicators
1
Sample indicators
48

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

bf8e512921522e49d16c638dc8d01bd0a2803a4ef019afbfc2f0941875019ea1 Sample

modified 2026-10-11 17:31:23
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

ec3e491a831b4057fc0e2ebe9f43c32f1f07959b6430b323d35d6d409d2b31e4 Sample

modified 2026-10-11 10:37:07
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

d30e3b07d605440ac92a808e3d4eda613597e0cfdcf5a99dcc5373ad5a4d5f6d Sample

modified 2026-10-07 08:09:27
MustangPanda (Cyber Threat Alliance)

20368acb2989e8f58a6e93a8c8ccaf66c4ace19e29ee5eaf7d07597629d9f195 Sample

modified 2026-10-07 08:09:22
MustangPanda (Cyber Threat Alliance)

edb5d4b454b6c7d3abecd6de7099e05575b8f28bb09dfc364e45ce8c16a34fcd Sample

modified 2026-10-04 05:03:22
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

b00c252a60171f33e32e64891ffe826b8a45f8816acf778838d788897213a405 Sample

modified 2026-09-18 06:37:25
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

3c6ace055527877778d989f469a5a70eb5ef7700375b850f0b1b8414151105ee Sample

modified 2026-09-18 06:37:18
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

324bfb2f414be221e24aaa9fb22cb49e4d4c0904bd7c203afdff158ba63fe35b Sample

modified 2026-09-18 06:37:09
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

0e4b81e04ca77762be2afb8bd451abb2ff46d2831028cde1c5d0ec45199f01a1 Sample

modified 2026-09-18 06:37:07
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

04b99518502774deb4a9d9cf6b54d43ff8f333d8ec5b4b230c0e995542bb2c61 Sample

modified 2026-09-18 06:37:00
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

0032d5430f1b5fcfb6a380b4f1d226b6b919f2677340503f04df04235409b2d0 Sample

modified 2026-09-18 06:36:58
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

0d13a503d86a6450f71408eb82a196718324465744bf6b8c4e0a780fd5be40c0 Sample

modified 2026-09-18 06:36:48
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

10cad59ea2a566597d933b1e8ba929af0b4c7af85481eacaab708ef4ddf6e0ee Sample

modified 2026-09-18 06:36:42
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

62c2e246855d589eb1ec37a9f3bcc0b6f3ba9946532aff8a39a4dc9d3a93f42c Sample

modified 2026-09-18 06:36:29
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

5f751fb287db51f79bb6df2e330a53b6d80ef3d2af93f09bb786b62e613514db Sample

modified 2026-09-18 06:36:25
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

3489955d23e66d6f34b3ada70b4d228547dbb3ccb0f6c7282553cbbdeaf168cb Sample

modified 2026-09-18 06:36:19
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

a0879dd439c7f1ed520aad0c309fe1dbf1a2fc41e2468f4174489a0ec56c47c7 Sample

modified 2026-09-18 06:36:17
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

baca1159acc715545a787d522950117eae5b7dc65efacfe86383f62e6b9b59d3 Sample

modified 2026-09-18 06:36:03
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

8ea34b85dd4fb64f7e6591e4f1c24763fc3421caa7c0f0d8350c67b9bafa4d32 Sample

modified 2026-09-18 06:35:57
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

989ede1df02e4d9620f6caf75a88a11791d156f62fdea4258e12d972df76bc05 Sample

modified 2026-09-18 06:35:45
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

2bc30ced135acd6a506cfb557734407f21b70fecd2f645c5b938e14199b24f1e Sample

modified 2026-09-18 06:35:41
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

Comments FRANCE - EU-CELAC Summit - May 4.js Sample

modified 2026-09-18 06:35:34
Ta428 (Maltiverse) · Generic.Malware (Maltiverse) · Generic Malware (Hybrid-Analysis)

ea2869424df2ffbb113017d95ae48ae8ed9897280fd21b26e046c75b3e43b25a Sample

modified 2026-09-18 06:35:10
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

bd3881964e351a7691bfc7e997e8a2c8ce4a8e26b79e3712d0cbdc484a5646b6 Sample

modified 2026-09-18 06:35:06
Ta428 (Maltiverse) · Generic.Malware (Maltiverse) · Generic Malware (Hybrid-Analysis)

720a70ca6ee1fbaf06c7cb60d14e27391130407e34e13a092d19f1df2c9c6d05 Sample

modified 2026-09-18 06:34:59
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

8cac6dfb2a894ff3f530c29e79dcd37810b4628279b9570a34f7e22bd4d416b3 Sample

modified 2026-09-18 06:34:57
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

08661f40f40371fc8a49380ad3d57521f9d0c2aa322ae4b0a684b27e637aed12 Sample

modified 2026-09-18 06:34:52
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

277390cc50e00f52e76a6562e6e699b0345497bd1df26c7c41bd56da5b6d1347 Sample

modified 2026-09-18 06:34:48
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

bddbc529f23ab6b865bc750508403ef57c8cf77284d613d030949bd37078d880 Sample

modified 2026-09-18 06:34:46
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

460c459db77c5625ed1c029b2dd6c6eae5e631b81a169494fb0182d550769f76 Sample

modified 2026-09-18 06:34:37
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

0bdfb922a39103658195d1d37ff584d24f7bd88464e7a119e86d6e3579958cc1 Sample

modified 2026-09-18 06:34:28
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

8a6ef9aa3f0762b03f983a1e53e8c731247273aafa410ed884ecd4c4e02c7db8 Sample

modified 2026-09-18 06:34:00
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

736451c2593bc1601c52b45c16ad8fd1aec56f868eb3bba333183723dea805af Sample

modified 2026-09-18 06:33:58
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

SolidPDFCreator.dll Sample

modified 2026-09-03 03:53:13
MustangPanda (MalwareBazaar Abuse.ch) · Zedhou (ThreatFox Abuse.ch) · Generic Malware (Hybrid-Analysis)

ce308b538ff3a0be0dbcee753db7e556a54b4aeddbddd0c03db7126b08911fe2 Sample

modified 2026-09-03 02:24:05
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

1acb061ce63ee8ee172fbdf518bd261ef2c46d818ffd4b1614db6ce3daa5a885 Sample

modified 2026-08-17 15:45:08
Ta428 (Maltiverse) · Generic.Malware (Maltiverse) · Generic.Malware (MalwareBazaar Abuse.ch) · Generic Malware (Hybrid-Analysis)

42e6067337ac9edd1ed6603ca8ed4f4f89520bca0995116e7095c2426b7edfe2 Sample

modified 2026-08-16 18:56:32
Generic.Malware (MalwareBazaar Abuse.ch) · MustangPanda (MalwareBazaar Abuse.ch)

941993f885957176d75f24ef3f8935ecb589bb9b445bb0d71fb18b65e61b6ee4.exe Sample

modified 2026-05-06 11:21:50
Generic.Malware (MalwareBazaar Abuse.ch) · MustangPanda (MalwareBazaar Abuse.ch) · Generic Malware (Hybrid-Analysis)

819f586ca65395bdd191a21e9b4f3281159f9826e4de0e908277518dba809e5b Sample

modified 2026-03-03 18:06:43
Mustang Panda (MalwarePatrol)

2c34b47ee7d271326cfff9701377277b05ec4654753b31c89be622e80d225250 Sample

modified 2026-03-03 18:06:42
Mustang Panda (MalwarePatrol)

f7d35cb95256513c07c262d4b03603e073e58eb4cd5fa9aac1e04ecc6e870d42 Sample

modified 2025-12-22 02:22:55
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

jcswcd.com Hostname

modified 2025-12-18 06:15:55
Ta428 (Maltiverse) · Malicious URL (Hybrid-Analysis) · Generic.Malware (Maltiverse)

9ce5abd02d397689d99f62dfbd2a6a396876c6629cb5db453f1dcbbc3465ac9a Sample

modified 2025-12-07 02:36:51
Ta428 (Maltiverse) · Generic.Malware (Maltiverse) · Generic Malware (Hybrid-Analysis)

ba55542c6fa12865633d6d24f4a81bffd512791a6e0a9b77f6b17a53e2216659 Sample

modified 2025-08-26 00:06:34
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

4547914e17c127d9b53bbc9d44de0e5b867f1a86d2e5ede828cd3188ed7fe838 Sample

modified 2024-12-12 17:45:05
Ta428 (Maltiverse) · Generic.Malware (Maltiverse) · Generic Malware (Hybrid-Analysis)

ea5825fa1f39587a88882e87064caae9dd3b79f02438dc3a229c5b775b530c7d Sample

modified 2023-07-05 20:50:44
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

fd0711a50c8af1dbc5c7ba42b894b2af8a2b03dd7544d20f5a887c93b9834429 Sample

modified 2023-07-05 20:50:44
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

c96723a68fc939c835578ff746f7d4c5371cb82a9c0dffe360bb656acea4d6e1 Sample

modified 2023-07-05 20:50:43
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)

bf4f8a5f75e9e5ecd752baa73abddd37b014728722ac3d74b82bffa625bf09b5 Sample

modified 2023-07-05 20:50:43
Ta428 (Maltiverse) · Generic.Malware (Maltiverse)