Skip to content

Chaes

Software · ATTACK:enterprise:S0631

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:S0631",
  "title": "Chaes",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0631",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--77e0ecf7-ca91-4c06-8012-8e728986a87a",
  "external_id": "S0631",
  "domain": "enterprise",
  "created": "2021-06-30T16:13:40.232Z",
  "modified": "2025-04-16T20:38:18.426Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Chaes"
    },
    {
      "source_name": "Cybereason Chaes Nov 2020",
      "url": "https://www.cybereason.com/hubfs/dam/collateral/reports/11-2020-Chaes-e-commerce-malware-research.pdf"
    }
  ]
}

Explicit source assertions (28)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1218.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--046716ed-d9ea-4416-a3a6-2dfa87584ce4

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1204.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--110ef143-aff1-4e73-abc2-cceaeab69c60

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1132.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1b6f0ec5-55d5-4aee-a90b-30238599d13c

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1573

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1d182249-ed44-4e5b-877c-178760379015

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1106

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--24a3fef1-9b1f-498b-8aca-df90565e6932

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1218.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--26372fd8-6298-4da6-b412-5fb155f55786

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1059.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--40ac660a-5f6d-4cac-8518-bb8dff6933ea

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1566.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4cfed6dd-68ac-4b0a-acd1-b888c0c69c4f

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1033

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5bef7ca6-0d66-4d7c-9972-56781548222a

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1048

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--682b7ced-a03b-4403-a058-9bc627c62f16

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1059.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--876a57e9-4a60-4863-a1b7-c1dad9903971

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1539

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8f6ffa28-0a5d-4adc-8789-17f3d83446a0

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1036.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--91668436-9db8-4a88-9dc0-c55681f80a6f

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1221

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9c22b1e4-df62-417d-a64f-c6f690ebe566

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1112

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9fde7504-bd24-46f5-88d7-4afcb8d37f4a

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a307922f-1cd2-4f95-aaa4-dcd40a8fcaab

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1056

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a74d38f5-92dc-4944-b840-0ab567f8f3ab

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1574.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b2ca0a15-a121-47c0-8123-b3092fe7d8d1

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1027.011

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b44bf5b1-42f8-4c70-9108-9699e8fa66ec

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1071.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b6ac2ef7-350d-48ca-9ab9-8a06f9ff84e3

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c2021918-3624-4473-8246-fb044caf44e6

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1059.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ccc14a82-43bc-4eea-b19f-95aba6bdb5e6

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1185

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cf130e28-dbd6-4312-ba0a-a3cbcf05c064

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e3a516b0-fa02-43dc-8247-0545a53693b1

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1113

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e8a1c5ce-e02f-44f6-939d-a77378f06890

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1140

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ebbb5d6e-9949-436b-85c5-5cd90a681042

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ee466042-fd08-4c86-898d-63fc5d4ed1d6

Cybereason Chaes Nov 2020

ATTACK:enterprise:S0631 → uses → ATTACK:enterprise:T1555.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f78a77ca-2a03-4a1f-8404-9adf1e504d48

Cybereason Chaes Nov 2020

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.