xorbot | 052180cf83663519a84b6600bcf33de2cd382c9ddf58e63f4410406d9bb18dbd | Triage

Sharing

General

Target

bins.sh
Size

10KB
Sample

241202-h3hq5azqfq
MD5

0d2c2bba48d2650adc694e38c0ad363a
SHA1

fa930798d5511e7d5bf147b6f4e43bcac6e2d2d3
SHA256

052180cf83663519a84b6600bcf33de2cd382c9ddf58e63f4410406d9bb18dbd
SHA512

509d5fc4d8fe3d00857fa23ca093204655f5670dda7ffb38ccc9361f767985830c9134525a6de4434feb2947d254ea4fc8e0f6546337919ba0833b819ea65739
SSDEEP

192:Fn6ODAYLhaZ52QM0eitMEgGUWq5oAyfXM52QMEeitME8tS5oAyfXJ6ODAYO:Fn6ODAYLhMwQMDGUWgwQMz16ODAYO

Score

10^/10

xorbot antivm botnet discovery linux trojan

Malware Config

Targets

- Target
  
  bins.sh
- Size
  
  10KB
- MD5
  
  0d2c2bba48d2650adc694e38c0ad363a
- SHA1
  
  fa930798d5511e7d5bf147b6f4e43bcac6e2d2d3
- SHA256
  
  052180cf83663519a84b6600bcf33de2cd382c9ddf58e63f4410406d9bb18dbd
- SHA512
  
  509d5fc4d8fe3d00857fa23ca093204655f5670dda7ffb38ccc9361f767985830c9134525a6de4434feb2947d254ea4fc8e0f6546337919ba0833b819ea65739
- SSDEEP
  
  192:Fn6ODAYLhaZ52QM0eitMEgGUWq5oAyfXM52QMEeitME8tS5oAyfXJ6ODAYO:Fn6ODAYLhMwQMDGUWgwQMz16ODAYO
Score

10^/10

discovery xorbot antivm botnet trojan
- Detects Xorbot
  botnet trojan
- Xorbot
  Xorbot is a linux botnet and trojan targeting IoT devices.
  botnet trojan xorbot
- Xorbot family
  xorbot
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Network Configuration Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

xorbotantivmbotnetdiscoverytrojan

behavioral3

xorbotbotnetdiscoverytrojan

behavioral4

xorbotbotnetdiscoverytrojan