S0144 ChChes

malwareEnterprise

platformsWindows

also known asChChes · Scorpion · HAYMAKER

ChChes is a Trojan that appears to be used exclusively by menuPass. It was used to target Japanese organizations in 2016. Its lack of persistence methods suggests it may be intended as a first-stage tool.

techniques used (12)

ATT&CK techniques this enables or maps to.

T1036.005Match Legitimate Resource Name or Location
T1057Process Discovery
T1071.001Web Protocols
T1082System Information Discovery
T1083File and Directory Discovery
T1105Ingress Tool Transfer
T1132.001Standard Encoding
T1547.001Registry Run Keys / Startup Folder
T1553.002Code Signing
T1555.003Credentials from Web Browsers
T1573.001Symmetric Cryptography
T1685Disable or Modify Tools

used by groups (1)

Threat groups associated with this.

G0045menuPass

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan