Chinoxy
Description
(Bitdefender) In the context of the current attack, the Chinoxy backdoor was mainly used to execute ccf32.exe for data collection.
Names
| Name |
|---|
| Chinoxy |
Category
Malware
Type
- Backdoor
- Info stealer
Information
- https://www.bitdefender.com/files/News/CaseStudies/study/379/Bitdefender-Whitepaper-Chinese-APT.pdf
- https://medium.com/@Sebdraven/how-to-unpack-chinoxy-backdoor-and-decipher-the-configuration-of-the-backdoor-4ffd98ca2a02
- https://nao-sec.org/2021/01/royal-road-redive.html
- https://www.pwc.co.uk/cyber-security/pdf/pwc-cyber-threats-2020-a-year-in-retrospect.pdf
- https://community.riskiq.com/article/56fa1b2f
- https://medium.com/@Sebdraven/new-version-of-chinoxy-backdoor-using-covid19-document-lure-83fa294c0746
- https://documents.trendmicro.com/assets/white_papers/wp-finding-APTX-attributing-attacks-via-MITRE-TTPs.pdf
Mitre Attack
Malpedia
Other Information
Uuid
29d70c9e-995a-43f8-8ac6-c9c5c446fd6f
Last Card Change
2022-12-30