ChChes

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[ChChes](https://attack.mitre.org/software/S0144) is a Trojan that appears to be used exclusively by [menuPass](https://attack.mitre.org/groups/G0045). It was used to target Japanese organizations in 2016. Its lack of persistence methods suggests it may be intended as a first-stage tool. (Citation: Palo Alto menuPass Feb 2017) (Citation: JPCERT ChChes Feb 2017) (Citation: PWC Cloud Hopper Technical Annex April 2017)

Associated Techniques (12)
ID ATT&CK Tactics
T1036.005 Match Legitimate Resource Name or Location -
T1057 Process Discovery -
T1071.001 Web Protocols -
T1082 System Information Discovery -
T1083 File and Directory Discovery -
T1105 Ingress Tool Transfer -
T1132.001 Standard Encoding -
T1547.001 Registry Run Keys / Startup Folder -
T1553.002 Code Signing -
T1555.003 Credentials from Web Browsers -
T1562.001 Disable or Modify Tools -
T1573.001 Symmetric Cryptography -
Aliases (210)
Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER Scorpion HAYMAKER
Used by Actors (1)
menuPass
Unknown
Metadata
ID: 600
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00