[Intel]: https://www.intezer.com/blog/malware-analysis/new-backdoor-sysjoker/

[timb-machine]

Area

Malware reports

Parent threat

Command and Control, Defense Evasion, Persistence, Discovery

Finding

https://www.intezer.com/blog/malware-analysis/new-backdoor-sysjoker/

Industry reference

attack:T1102:Web Service
attack:T1071.001:Web Protocols
attack:T1573.001:Symmetric Cryptography
attack:T1573:Encrypted Traffic
attack:T1053.003:Cron
attack:T1033:System Owner/User Discovery
attack:T1016:System Network Configuration Discovery
attack:T1070.004:File Deletion
uses:RedirectionToNull
delivery:NPM

Malware reference

SysJoker
wltm

Actor reference

No response

Component

Linux

Scenario

No response