Exaramel for Linux
Software · ATTACK:enterprise:S0401
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0401",
"title": "Exaramel for Linux",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0401",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--11194d8b-fdce-45d2-8047-df15bb8f16bd",
"external_id": "S0401",
"domain": "enterprise",
"created": "2019-08-26T13:02:46.378Z",
"modified": "2024-04-11T02:34:14.304Z",
"version": "1.3",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Exaramel for Linux"
},
{
"source_name": "ESET TeleBots Oct 2018",
"url": "https://www.welivesecurity.com/2018/10/11/new-telebots-backdoor-linking-industroyer-notpetya/"
}
]
}Explicit source assertions (13)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0401 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--15bb2796-7c6d-4d03-8d86-8d83254bcf0b
ESET TeleBots Oct 2018 · ANSSI Sandworm January 2021ATTACK:enterprise:S0401 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--23f656c7-600f-46a7-8185-0edf45299bac
ANSSI Sandworm January 2021ATTACK:enterprise:G0034 → uses → ATTACK:enterprise:S0401
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3bf307c2-efb0-40b1-b896-82d15a9bce5f
ESET TeleBots Oct 2018 · ANSSI Sandworm January 2021ATTACK:enterprise:S0401 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4528e56e-6c64-4eef-853d-d4011a9ea7ef
ESET TeleBots Oct 2018 · ANSSI Sandworm January 2021ATTACK:enterprise:S0401 → uses → ATTACK:enterprise:T1543
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5a832b2f-7aa5-4a11-a06a-5cd22fb7f457
ANSSI Sandworm January 2021ATTACK:enterprise:S0401 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6f64c3b9-7882-4bcf-9ff2-3dcce03cf632
ANSSI Sandworm January 2021ATTACK:enterprise:S0401 → uses → ATTACK:enterprise:T1008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--73a5da20-5358-4da8-8417-020a7dec52cb
ANSSI Sandworm January 2021ATTACK:enterprise:S0401 → uses → ATTACK:enterprise:T1543.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9a24e972-81d5-4cfc-81ed-3e7752e3b463
ESET TeleBots Oct 2018 · ANSSI Sandworm January 2021ATTACK:enterprise:S0401 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9cc847b7-61ae-46f7-ab06-16560775d44b
ANSSI Sandworm January 2021ATTACK:enterprise:S0401 → uses → ATTACK:enterprise:T1548.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c8a0012e-9b2c-4fef-8aeb-7bc77d1b16c3
ANSSI Sandworm January 2021ATTACK:enterprise:S0401 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--db1b7307-a473-40eb-be9c-25d95c0e2054
ANSSI Sandworm January 2021 · ESET TeleBots Oct 2018ATTACK:enterprise:S0401 → uses → ATTACK:enterprise:T1059.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--db451851-13b7-4aec-9146-2a770115140a
ESET TeleBots Oct 2018 · ANSSI Sandworm January 2021ATTACK:enterprise:S0401 → uses → ATTACK:enterprise:T1053.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e28ddc1d-83a4-4382-a4dc-e55a60aa399d
ESET TeleBots Oct 2018 · ANSSI Sandworm January 2021