ChChes
- ID
- S0144
- Type
- Malware
- Associated names
- Scorpion, HAYMAKER
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 18 Nov 2024
ChChes is a Trojan that appears to be used exclusively by menuPass. It was used to target Japanese organizations in 2016. Its lack of persistence methods suggests it may be intended as a first-stage tool. [1] [2] [3]
Techniques used (12)
- T1036.005 Match Legitimate Resource Name or Location
- T1057 Process Discovery
- T1071.001 Web Protocols
- T1082 System Information Discovery
- T1083 File and Directory Discovery
- T1105 Ingress Tool Transfer
- T1132.001 Standard Encoding
- T1547.001 Registry Run Keys / Startup Folder
- T1553.002 Code Signing
- T1555.003 Credentials from Web Browsers
- T1573.001 Symmetric Cryptography
- T1685 Disable or Modify Tools