S1041 Chinoxy

malwareEnterprise

platformsWindows

also known asChinoxy

Chinoxy is a backdoor that has been used since at least November 2018, during the FunnyDream campaign, to gain persistence and drop additional payloads. According to security researchers, Chinoxy has been used by Chinese-speaking threat actors.

techniques used (5)

ATT&CK techniques this enables or maps to.

T1027.013Encrypted/Encoded File
T1036.005Match Legitimate Resource Name or Location
T1140Deobfuscate/Decode Files or Information
T1547.001Registry Run Keys / Startup Folder
T1574.001DLL

used by campaigns (1)

Campaigns that use this.

C0007FunnyDream

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan