xorbot | 7ed5ee86d08e63ff9f9966b927021bb307c2a1f351ce34e21cc0557efa53603f | Triage

Sharing

General

Target

9L88Y_bins.sh
Size

10KB
Sample

241204-r4zkpsylhz
MD5

2642af73e2a346e57ee290373f8384e2
SHA1

199db0d487748c0b7960fb91200d087ce923e076
SHA256

7ed5ee86d08e63ff9f9966b927021bb307c2a1f351ce34e21cc0557efa53603f
SHA512

9f3a05d15e9519f8a6b0c015fbc62c457e97bad3533402961a4ffac9da794cce587ec4bc72329a8a83ad217e4017072e5495ffc3aa9c6c30dc12bed94ea854a2
SSDEEP

192:djWKeDXyF9r4TJ6OpdfVyC3JPDXyF9rcpdfy:dCK7D4MP

Score

10^/10

xorbot antivm botnet discovery linux trojan

Malware Config

Targets

- Target
  
  9L88Y_bins.sh
- Size
  
  10KB
- MD5
  
  2642af73e2a346e57ee290373f8384e2
- SHA1
  
  199db0d487748c0b7960fb91200d087ce923e076
- SHA256
  
  7ed5ee86d08e63ff9f9966b927021bb307c2a1f351ce34e21cc0557efa53603f
- SHA512
  
  9f3a05d15e9519f8a6b0c015fbc62c457e97bad3533402961a4ffac9da794cce587ec4bc72329a8a83ad217e4017072e5495ffc3aa9c6c30dc12bed94ea854a2
- SSDEEP
  
  192:djWKeDXyF9r4TJ6OpdfVyC3JPDXyF9rcpdfy:dCK7D4MP
Score

10^/10

discovery antivm xorbot botnet trojan
- Detects Xorbot
  botnet trojan
- Xorbot
  Xorbot is a linux botnet and trojan targeting IoT devices.
  botnet trojan xorbot
- Xorbot family
  xorbot
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Network Configuration Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

antivmdiscovery

behavioral3

behavioral4

xorbotbotnetdiscoverytrojan