Free scan↗
  • English
  • Deutsch

G0114 Chimera

Enterprise

also known asChimera

Chimera is a suspected China-based threat group that has been active since at least 2018 targeting the semiconductor industry in Taiwan as well as data from the airline industry.

01

canonical actor

The group this is attributed to.

Chimera
02

techniques used (59)

ATT&CK techniques this enables or maps to.

  • T1003.003NTDS
  • T1007System Service Discovery
  • T1012Query Registry
  • T1016System Network Configuration Discovery
  • T1018Remote System Discovery
  • T1021.001Remote Desktop Protocol
  • T1021.002SMB/Windows Admin Shares
  • T1021.006Windows Remote Management
  • T1027.010Command Obfuscation
  • T1033System Owner/User Discovery
  • T1036.005Match Legitimate Resource Name or Location
  • T1039Data from Network Shared Drive
  • T1041Exfiltration Over C2 Channel
  • T1046Network Service Discovery
  • T1047Windows Management Instrumentation
  • T1049System Network Connections Discovery
  • T1053.005Scheduled Task
  • T1057Process Discovery
  • T1059.001PowerShell
  • T1059.003Windows Command Shell
showing 20 of 59
03

software used (6)

Malware and tools associated with this.

  • S0521BloodHound
  • S0154Cobalt Strike
  • S0002Mimikatz
  • S0039Net
  • S0029PsExec
  • S0404esentutl
04

source

Where this definition is published.

view on ATT&CK↗
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…