Exaramel for Linux

Exaramel for Linux is a backdoor written in the Go Programming Language and compiled as a 64-bit ELF binary. The Windows version is tracked separately under Exaramel for Windows.

View graph Watch Export

Indicators tracked

Intelligence Reports10

10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

13 relationships

T1033: System Owner/User Discovery

source

T1027.013: Encrypted/Encoded File

source

T1543: Create or Modify System Process

source

T1053.003: Cron

source

T1140: Deobfuscate/Decode Files or Information

source

T1548.001: Setuid and Setgid

source

T1059.004: Unix Shell

source

T1070.004: File Deletion

source

T1071.001: Web Protocols

source

T1543.002: Systemd Service

source

T1105: Ingress Tool Transfer

source

T1008: Fallback Channels

source