S0401 Exaramel for Linux

malwareEnterprise

platformsLinux

also known asExaramel for Linux

Exaramel for Linux is a backdoor written in the Go Programming Language and compiled as a 64-bit ELF binary. The Windows version is tracked separately under Exaramel for Windows.

techniques used (12)

ATT&CK techniques this enables or maps to.

T1008Fallback Channels
T1027.013Encrypted/Encoded File
T1033System Owner/User Discovery
T1053.003Cron
T1059.004Unix Shell
T1070.004File Deletion
T1071.001Web Protocols
T1105Ingress Tool Transfer
T1140Deobfuscate/Decode Files or Information
T1543Create or Modify System Process
T1543.002Systemd Service
T1548.001Setuid and Setgid

used by groups (1)

Threat groups associated with this.

G0034Sandworm Team

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan