MITRE ATT&CKsoftware (malware)

S0631 Chaes

Published 2021-06-30 Modified 2025-04-16 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2021-06-30

Description

Chaes is a multistage information stealer written in several programming languages that collects login credentials, credit card numbers, and other financial information. Chaes was first observed in 2020, and appears to primarily target victims in Brazil as well as other e-commerce customers in Latin America.

Related

Uses · MITRE ATT&CK (28)

  • T1027.011 Fileless Storage sub-technique
  • T1059.007 JavaScript sub-technique
  • T1573 Encrypted Channel technique
  • T1071.001 Web Protocols sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1574.001 DLL sub-technique
  • T1204.002 Malicious File sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1059.005 Visual Basic sub-technique
  • T1059.006 Python sub-technique
  • T1566.001 Spearphishing Attachment sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1218.007 Msiexec sub-technique
  • T1218.004 InstallUtil sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1539 Steal Web Session Cookie technique
  • T1221 Template Injection technique
  • T1185 Browser Session Hijacking technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1033 System Owner/User Discovery technique
  • T1048 Exfiltration Over Alternative Protocol technique
  • T1056 Input Capture technique
  • T1082 System Information Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1106 Native API technique
  • T1112 Modify Registry technique
  • T1113 Screen Capture technique

References