216.73.216.215

ChChes

The MITRE Corporation · Published 31/05/2017 23:33 · Modified 27/03/2026 01:06 Family

Essential information

Confidence
100/100
Is family
Yes
Published
31/05/2017 23:33
Modified
27/03/2026 01:06
Revoked
No
Author / Source
The MITRE Corporation
Related entities
13 attack patterns (mitre), 1 intrusion sets (apt)

Aliases

Scorpion HAYMAKER

Description

[ChChes](https://attack.mitre.org/software/S0144) is a Trojan that appears to be used exclusively by [menuPass](https://attack.mitre.org/groups/G0045). It was used to target Japanese organizations in 2016. Its lack of persistence methods suggests it may be intended as a first-stage tool. (Citation: Palo Alto menuPass Feb 2017) (Citation: JPCERT ChChes Feb 2017) (Citation: PWC Cloud Hopper Technical Annex April 2017)

Marking (TLP)

Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references