ChChes (3f2283ef-67c2-49a3-98ac-1aa9f0499361)
ChChes is a Trojan that appears to be used exclusively by menuPass. It was used to target Japanese organizations in 2016. Its lack of persistence methods suggests it may be intended as a first-stage tool. [Palo Alto menuPass Feb 2017] [JPCERT ChChes Feb 2017] [PWC Cloud Hopper Technical Annex April 2017]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| menuPass (fb93231d-2ae4-45da-9dea-4c372a11f322) | Tidal Groups | ChChes (3f2283ef-67c2-49a3-98ac-1aa9f0499361) | Tidal Software | 1 |