S0341 Xbash

malwareEnterprise

platformsWindows · Linux

also known asXbash

Xbash is a malware family that has targeted Linux and Microsoft Windows servers. The malware has been tied to the Iron Group, a threat actor group known for previous ransomware attacks. Xbash was developed in Python and then converted into a self-contained Linux ELF executable by using PyInstaller.

01

techniques used (16)

ATT&CK techniques this enables or maps to.

02

source

Where this definition is published.

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan