MITRE ATT&CKsoftware (malware)

S0401 Exaramel for Linux

Published 2019-08-26 Modified 2024-04-11 Official page ↗
Domain
enterprise
Platforms
Linux
Version
1.3
Created
2019-08-26

Description

Exaramel for Linux is a backdoor written in the Go Programming Language and compiled as a 64-bit ELF binary. The Windows version is tracked separately under Exaramel for Windows.

Related

Uses · MITRE ATT&CK (12)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1059.004 Unix Shell sub-technique
  • T1070.004 File Deletion sub-technique
  • T1548.001 Setuid and Setgid sub-technique
  • T1543.002 Systemd Service sub-technique
  • T1543 Create or Modify System Process technique
  • T1053.003 Cron sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1008 Fallback Channels technique
  • T1033 System Owner/User Discovery technique
  • T1105 Ingress Tool Transfer technique

Referenced by MITRE ATT&CK · uses (1)

  • G0034 Sandworm Team group

References