Lee 2013

Lee, T., Hanzlik, D., Ahl, I. (2013, August 7). Breaking Down the China Chopper Web Shell - Part I. Retrieved March 27, 2015.

Techniques1

None recorded.

None recorded.

Technique	Used by	Procedure example
T1005 Data from Local System	MalwareChina Chopper	China Chopper's server component can upload local files. FireEye Periscope March 2018 Lee 2013 NCSC Joint Report Public Tools Rapid7 HAFNIUM Mar 2021
T1027.002 Software Packing	MalwareChina Chopper	China Chopper's client component is packed with UPX. Lee 2013
T1059.003 Windows Command Shell	MalwareChina Chopper	China Chopper's server component is capable of opening a command terminal. Lee 2013 NCSC Joint Report Public Tools SecureWorks BRONZE UNION June 2017
T1070.006 Timestomp	MalwareChina Chopper	China Chopper's server component can change the timestamp of files. FireEye Periscope March 2018 Lee 2013 NCSC Joint Report Public Tools
T1105 Ingress Tool Transfer	MalwareChina Chopper	China Chopper's server component can download remote files. FireEye Periscope March 2018 Kaspersky ToddyCat June 2022 Lee 2013 NCSC Joint Report Public Tools Rapid7 HAFNIUM Mar 2021
T1505.003 Web Shell	MalwareChina Chopper	China Chopper's server component is a Web Shell payload. Lee 2013

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.