ThaiCERT    ETDA    MDES
Report
Search
Home > List all groups > List all tools > List all groups using tool Chinoxy

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link Tool: Chinoxy

NamesChinoxy
CategoryMalware
TypeBackdoor, Info stealer
Description(Bitdefender) In the context of the current attack, the Chinoxy backdoor was mainly used to execute ccf32.exe for data collection.
Information<https://www.bitdefender.com/files/News/CaseStudies/study/379/Bitdefender-Whitepaper-Chinese-APT.pdf>
<https://medium.com/@Sebdraven/how-to-unpack-chinoxy-backdoor-and-decipher-the-configuration-of-the-backdoor-4ffd98ca2a02>
<https://nao-sec.org/2021/01/royal-road-redive.html>
<https://www.pwc.co.uk/cyber-security/pdf/pwc-cyber-threats-2020-a-year-in-retrospect.pdf>
<https://community.riskiq.com/article/56fa1b2f>
<https://medium.com/@Sebdraven/new-version-of-chinoxy-backdoor-using-covid19-document-lure-83fa294c0746>
<https://documents.trendmicro.com/assets/white_papers/wp-finding-APTX-attributing-attacks-via-MITRE-TTPs.pdf>
Malpedia<https://malpedia.caad.fkie.fraunhofer.de/details/win.chinoxy>

Last change to this tool card: 23 April 2021

Download this tool card in JSON format

Previous: China Chopper
Next: Chocopop

All groups using tool Chinoxy

ChangedNameCountryObserved

APT groups

 FunnyDreamChina2018 

1 group listed (1 APT, 0 other, 0 unknown)

Thailand Computer Emergency Response Team (ThaiCERT)
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1234
E-mail report@thaicert.or.th
PGP Download PGP key