Skidmap

ATP Sandbox Adv. Heuristics

Stats

First seen: July 2023
Last seen: October 2026

MITRE ATT&CK techniques

16 techniques across 7 tactics.

TA0002 Execution

T1053Scheduled Task/Job
- T1053.003Cron
T1059Command and Scripting Interpreter
- T1059.004Unix Shell

TA0003 Persistence

T1098Account Manipulation
- T1098.004SSH Authorized Keys
T1547Boot or Logon Autostart Execution
- T1547.006Kernel Modules and Extensions

TA0005 Stealth

T1014Rootkit
T1027Obfuscated Files or Information
- T1027.013Encrypted/Encoded File
T1036Masquerading
- T1036.005Match Legitimate Resource Name or Location
T1140Deobfuscate/Decode Files or Information

TA0007 Discovery

T1057Process Discovery
T1082System Information Discovery
T1083File and Directory Discovery
T1518Software Discovery
- T1518.001Security Software Discovery

TA0011 Command and Control

T1105Ingress Tool Transfer

TA0040 Impact

T1496Resource Hijacking
- T1496.001Compute Hijacking

TA0112 Defense Impairment

T1556Modify Authentication Process
- T1556.003Pluggable Authentication Modules
T1685Disable or Modify Tools

Alert name variants

Alert Name	Engine
Linux.Trojan.Skidmap	ATP Sandbox Adv. Heuristics

Related families

Bazar DarkGate Metamorfo Carberp Grandoreiro