SHOTPUT — Malware Profile

SHOTPUT is a custom backdoor used by APT3.

MITRE ATT&CK techniques (6)

• T1018 Remote System Discovery
• T1027 Obfuscated Files or Information
• T1049 System Network Connections Discovery
• T1057 Process Discovery
• T1083 File and Directory Discovery
• T1087.001 Local Account

IntelFusions coverage

• FireEye Exposes APT3's Operation Clandestine Wolf Exploiting Adobe Flash Zero-Day CVE-2015-3113 2026-02-16

Attributed threat actors

• APT3

Read the full analysis on IntelFusions