xorbot | f9bbb5314718092bec8de4c926c56ceb2f2c539635eed118b6be25c41dff391d | Triage

Sharing

General

Target

bins.sh
Size

10KB
Sample

241130-w9f3rs1mb1
MD5

277216eb024be84aef13b1ce93f09b83
SHA1

4ed577ff10f121b83f630d8a80dd8dc48b61b48d
SHA256

f9bbb5314718092bec8de4c926c56ceb2f2c539635eed118b6be25c41dff391d
SHA512

cfd13936e626f6aa81a3062f35d4ce9654bce5207bb0d5c70f89f97c1d4b1fe8056d0b85bbb9688aabdc2cc52ec6ee95f75452353902354fc2614c88c7c91746
SSDEEP

96:YFlWUTUvUnbyyvL99HtWtGtn6emV1FHokhJNJNJWBlkgcOl7X2L7XgL6ymUPWsP6:+IcnbyyvKk8ImW6XIcnbyy2s

Score

10^/10

xorbot antivm botnet discovery linux trojan

Malware Config

Targets

- Target
  
  bins.sh
- Size
  
  10KB
- MD5
  
  277216eb024be84aef13b1ce93f09b83
- SHA1
  
  4ed577ff10f121b83f630d8a80dd8dc48b61b48d
- SHA256
  
  f9bbb5314718092bec8de4c926c56ceb2f2c539635eed118b6be25c41dff391d
- SHA512
  
  cfd13936e626f6aa81a3062f35d4ce9654bce5207bb0d5c70f89f97c1d4b1fe8056d0b85bbb9688aabdc2cc52ec6ee95f75452353902354fc2614c88c7c91746
- SSDEEP
  
  96:YFlWUTUvUnbyyvL99HtWtGtn6emV1FHokhJNJNJWBlkgcOl7X2L7XgL6ymUPWsP6:+IcnbyyvKk8ImW6XIcnbyy2s
Score

10^/10

discovery antivm xorbot botnet trojan
- Detects Xorbot
  botnet trojan
- Xorbot
  Xorbot is a linux botnet and trojan targeting IoT devices.
  botnet trojan xorbot
- Xorbot family
  xorbot
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Network Configuration Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

antivmdiscovery

behavioral3

xorbotbotnetdiscoverytrojan

behavioral4

xorbotbotnetdiscoverytrojan