xorbot | b60479e268e43a2ab296e360719ca10755bd6428e7a747637db4fb7e7dcd9768 | Triage

Sharing

General

Target

bins.sh
Size

10KB
Sample

241202-s77adszrcz
MD5

5830ff582e5f9a6682c688152a036f93
SHA1

873bbaeef119d68e131c2becd3009dfce19fe655
SHA256

b60479e268e43a2ab296e360719ca10755bd6428e7a747637db4fb7e7dcd9768
SHA512

1d5ad854470a5c4f704286be30c8d38e96d20c757dd940c25f04457b4b9724a4c2bb0cb8ffa411b8f09fb193a30631a43e6338baa437afe9cb5af09c28533398
SSDEEP

192:kFAHOHWHt2qhs8reSJZQm4wcLWWhz7kwcLWWfz7gHOHWHt2qAs8reStv:kFAu2jQmcz7cz7gu2a

Score

10^/10

xorbot antivm botnet discovery linux trojan

Malware Config

Targets

- Target
  
  bins.sh
- Size
  
  10KB
- MD5
  
  5830ff582e5f9a6682c688152a036f93
- SHA1
  
  873bbaeef119d68e131c2becd3009dfce19fe655
- SHA256
  
  b60479e268e43a2ab296e360719ca10755bd6428e7a747637db4fb7e7dcd9768
- SHA512
  
  1d5ad854470a5c4f704286be30c8d38e96d20c757dd940c25f04457b4b9724a4c2bb0cb8ffa411b8f09fb193a30631a43e6338baa437afe9cb5af09c28533398
- SSDEEP
  
  192:kFAHOHWHt2qhs8reSJZQm4wcLWWhz7kwcLWWfz7gHOHWHt2qAs8reStv:kFAu2jQmcz7cz7gu2a
Score

10^/10

discovery antivm xorbot botnet trojan
- Detects Xorbot
  botnet trojan
- Xorbot
  Xorbot is a linux botnet and trojan targeting IoT devices.
  botnet trojan xorbot
- Xorbot family
  xorbot
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Network Configuration Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

antivmdiscovery

behavioral3

xorbotbotnetdiscoverytrojan

behavioral4

xorbotbotnetdiscoverytrojan