MITRE ATT&CKsoftware (malware)

S1041 Chinoxy

Published 2022-09-21 Modified 2024-04-11 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2022-09-21

Description

Chinoxy is a backdoor that has been used since at least November 2018, during the FunnyDream campaign, to gain persistence and drop additional payloads. According to security researchers, Chinoxy has been used by Chinese-speaking threat actors.

Related

Uses · MITRE ATT&CK (5)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1574.001 DLL sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique

Referenced by MITRE ATT&CK · uses (1)

  • C0007 FunnyDream campaign

References