NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/Gomir
● Malware

Gomir

Gomir is a Linux backdoor variant of the Go-based malware GoBear, uniquely assoicated with Kimsuky operations.

View graph Watch Export
Indicators tracked
0
Intelligence Reports10
10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
17 relationships
T1132.001: Standard Encoding
source
T1053.003: Cron
source
T1082: System Information Discovery
source
T1016: System Network Configuration Discovery
source
T1083: File and Directory Discovery
source
T1069.001: Local Groups
source
T1059.004: Unix Shell
source
T1573: Encrypted Channel
source
T1573.002: Asymmetric Cryptography
source
T1070.004: File Deletion
source
T1071.001: Web Protocols
source
T1543.002: Systemd Service
source
T1018: Remote System Discovery
source
T1090.001: Internal Proxy
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon