Exaramel for Windows

Malware & Tools · Exaramel for Windows

· MalwareS0343 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Exaramel for Windows is a backdoor used for targeting Windows systems. The Linux version is tracked separately under Exaramel for Linux.(Citation: ESET TeleBots Oct 2018)

Tactic Coverage

stealth (2)execution (2)collection (2)persistence (2)defense impairment (1)privilege escalation (1)

Used By (1 groups)

G0034Sandworm TeamELECTRUM, Telebots

Techniques (8)

T1027.011Fileless Storage

stealth

T1036.004Masquerade Task or Service

stealth

T1059.003Windows Command Shell

execution

T1059.005Visual Basic

execution

T1074.001Local Data Staging

collection

T1112Modify Registry

defense impairmentpersistence

T1543.003

References

https://attack.mitre.org/software/S0343 https://www.welivesecurity.com/2018/10/11/new-telebots-backdoor-linking-industroyer-notpetya/