Exaramel for Linux

Malware & Tools · Exaramel for Linux

· MalwareS0401 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Linux

Description

Exaramel for Linux is a backdoor written in the Go Programming Language and compiled as a 64-bit ELF binary. The Windows version is tracked separately under Exaramel for Windows.(Citation: ESET TeleBots Oct 2018)

Tactic Coverage

privilege escalation (4)command and control (3)stealth (3)persistence (3)execution (2)discovery (1)

Used By (1 groups)

G0034Sandworm TeamELECTRUM, Telebots

Techniques (12)

T1008Fallback Channels

command and control

T1027.013Encrypted/Encoded File

stealth

T1033System Owner/User Discovery

discovery

T1053.003Cron

executionpersistence

T1059.004Unix Shell

execution

T1070.004File Deletion

stealth

T1071.001

References

https://attack.mitre.org/software/S0401 https://www.welivesecurity.com/2018/10/11/new-telebots-backdoor-linking-industroyer-notpetya/