timb-machine / timb-machine/linux-malware

[Intel]: https://blog.lumen.com/chaos-is-a-go-based-swiss-army-knife-of-malware/

Open
#524 0 comments 0 reactions 1 assignee View on GitHub

@timb-machine is already working on this.

Since Sep 28, 2022.

missing:tag:T1005 missing:tag:T1021.004 missing:tag:T1027.002 missing:tag:T1037 missing:tag:T1048 missing:tag:T1053.007 missing:tag:T1057 missing:tag:T1070.003 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1098.004 missing:tag:T1491 missing:tag:T1546.004 missing:tag:T1552.003 missing:tag:T1552.004 missing:tag:T1560 missing:tag:T1567 missing:tag:T1573 missing:tag:T1609 missing:tag:T1610
Dominant language
HTML
Stars
1.2k
Forks
95
PR merge metrics
No merged PRs in 30d

Description

Area

Malware reports

Parent threat

Initial Access, Execution, Persistence, Discovery, Lateral Movement, Command and Control, Exfiltration

Finding

https://blog.lumen.com/chaos-is-a-go-based-swiss-army-knife-of-malware/

Industry reference

uses:Go
attack:T1573:Encrypted Channel
attack:T1048:Exfiltration Over Alternative Protocol
attack:T1021.004:SSH
attack:T1057:Process Discovery
attack:T1552.004:Private Keys
attack:T1190:Exploit Public-Facing Application

Malware reference

Chaos
/malware/binaries/Chaos

Actor reference

No response

Component

Linux

Scenario

No response

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.