S0667 Chrommme

malwareEnterprise

platformsWindows

also known asChrommme

Chrommme is a backdoor tool written using the Microsoft Foundation Class (MFC) framework that was first reported in June 2021; security researchers noted infrastructure overlaps with Gelsemium malware.

techniques used (14)

ATT&CK techniques this enables or maps to.

T1005Data from Local System
T1016System Network Configuration Discovery
T1027.013Encrypted/Encoded File
T1029Scheduled Transfer
T1033System Owner/User Discovery
T1041Exfiltration Over C2 Channel
T1074.001Local Data Staging
T1082System Information Discovery
T1105Ingress Tool Transfer
T1106Native API
T1113Screen Capture
T1140Deobfuscate/Decode Files or Information
T1560Archive Collected Data
T1680Local Storage Discovery

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan