Chrommme

Chrommme is a backdoor tool written using the Microsoft Foundation Class (MFC) framework that was first reported in June 2021; security researchers noted infrastructure overlaps with Gelsemium malware.

View graph Watch Export

Indicators tracked

Intelligence Reports10

10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

14 relationships

T1113: Screen Capture

source

T1033: System Owner/User Discovery

source

T1027.013: Encrypted/Encoded File

source

T1074.001: Local Data Staging

source

T1082: System Information Discovery

source

T1106: Native API

source

T1005: Data from Local System

source

T1140: Deobfuscate/Decode Files or Information

source

T1029: Scheduled Transfer

source

T1560: Archive Collected Data

source

T1016: System Network Configuration Discovery

source

T1041: Exfiltration Over C2 Channel

source

T1105: Ingress Tool Transfer

source

T1680: Local Storage Discovery

source