MITRE ATT&CKsoftware (malware)

S1198 Gomir

Published 2025-01-17 Modified 2025-01-17 Official page ↗
Domain
enterprise
Platforms
Linux
Version
1.0
Created
2025-01-17

Description

Gomir is a Linux backdoor variant of the Go-based malware GoBear, uniquely assoicated with Kimsuky operations.

Related

Uses · MITRE ATT&CK (14)

  • T1573 Encrypted Channel technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1090.001 Internal Proxy sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1069.001 Local Groups sub-technique
  • T1059.004 Unix Shell sub-technique
  • T1070.004 File Deletion sub-technique
  • T1543.002 Systemd Service sub-technique
  • T1053.003 Cron sub-technique
  • T1016 System Network Configuration Discovery technique
  • T1018 Remote System Discovery technique
  • T1082 System Information Discovery technique
  • T1083 File and Directory Discovery technique

Referenced by MITRE ATT&CK · uses (1)

References