MITRE ATT&CKsoftware (malware)

S0468 Skidmap

Published 2020-06-09 Modified 2024-04-11 Official page ↗
Domain
enterprise
Platforms
Linux
Version
1.1
Created
2020-06-09

Description

Skidmap is a kernel-mode rootkit used for cryptocurrency mining.

Related

Uses · MITRE ATT&CK (16)

  • T1685 Disable or Modify Tools technique
  • T1496.001 Compute Hijacking sub-technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1556.003 Pluggable Authentication Modules sub-technique
  • T1098.004 SSH Authorized Keys sub-technique
  • T1059.004 Unix Shell sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1547.006 Kernel Modules and Extensions sub-technique
  • T1053.003 Cron sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1014 Rootkit technique
  • T1057 Process Discovery technique
  • T1082 System Information Discovery technique
  • T1083 File and Directory Discovery technique
  • T1105 Ingress Tool Transfer technique

References