rekoobe | df90558a84cfcf80639f32b31aec187b813df556e3c155a05af91dedfd2d7429 | Triage

Sharing

General

Target

df90558a84cfcf80639f32b31aec187b813df556e3c155a05af91dedfd2d7429
Size

84KB
Sample

221203-3mb9mafe74
MD5

355358a22b6f1d9e122c2ff830b2849b
SHA1

b19c1696b032805014f9cc289caf45e346936583
SHA256

df90558a84cfcf80639f32b31aec187b813df556e3c155a05af91dedfd2d7429
SHA512

3a99d2798af91c982be363fd624098c2fbbc4c042b00e5d27d15225b7816ac2d6f028b88918ed43ac2722f65aafdb63536e46c7cca3ee24ad0ddc4c109e9f6de
SSDEEP

1536:rV3T+Q0YNuV8NnUTnhhW+LUlP7oqHekyN/1H5xuM8VS:rVqxWUTnhhW+LOoq+xN/1Zx2o

Score

10^/10

rekoobe linux

Malware Config

Extracted

Family

rekoobe

C2

47.91.213.173:443

Targets

- Target
  
  df90558a84cfcf80639f32b31aec187b813df556e3c155a05af91dedfd2d7429
- Size
  
  84KB
- MD5
  
  355358a22b6f1d9e122c2ff830b2849b
- SHA1
  
  b19c1696b032805014f9cc289caf45e346936583
- SHA256
  
  df90558a84cfcf80639f32b31aec187b813df556e3c155a05af91dedfd2d7429
- SHA512
  
  3a99d2798af91c982be363fd624098c2fbbc4c042b00e5d27d15225b7816ac2d6f028b88918ed43ac2722f65aafdb63536e46c7cca3ee24ad0ddc4c109e9f6de
- SSDEEP
  
  1536:rV3T+Q0YNuV8NnUTnhhW+LUlP7oqHekyN/1H5xuM8VS:rVqxWUTnhhW+LOoq+xN/1Zx2o
Score

8^/10
- Writes DNS configuration
  Writes data to DNS resolver config file.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Dynamic Resolution

Impact

Tasks

static1

behavioral1