MITRE ATT&CKsoftware (malware)
S0144 ChChes
- Domain
- enterprise
- Platforms
- Windows
- Aliases
- Scorpion, HAYMAKER
- Version
- 1.1
- Created
- 2017-05-31
Description
Related
Uses · MITRE ATT&CK (12)
- T1685 Disable or Modify Tools technique
- T1573.001 Symmetric Cryptography sub-technique
- T1071.001 Web Protocols sub-technique
- T1132.001 Standard Encoding sub-technique
- T1555.003 Credentials from Web Browsers sub-technique
- T1036.005 Match Legitimate Resource Name or Location sub-technique
- T1553.002 Code Signing sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1057 Process Discovery technique
- T1082 System Information Discovery technique
- T1083 File and Directory Discovery technique
- T1105 Ingress Tool Transfer technique
Referenced by MITRE ATT&CK · uses (1)
- G0045 menuPass group
References
- https://x.com/ItsReallyNick/status/850105140589633536 Twitter Nick Carr APT10
- https://www.fireeye.com/blog/threat-research/2017/04/apt10_menupass_grou.html FireEye APT10 April 2017
- http://researchcenter.paloaltonetworks.com/2017/02/unit42-menupass-returns-new-malware-new-attacks-japanese-academics-organizations/ Palo Alto menuPass Feb 2017
- https://blogs.jpcert.or.jp/en/2017/02/chches-malware--93d6.html JPCERT ChChes Feb 2017
- https://www.pwc.co.uk/cyber-security/pdf/pwc-uk-operation-cloud-hopper-technical-annex-april-2017.pdf PWC Cloud Hopper Technical Annex April 2017