General
-
Target
55dbdb84c40d9dc8c5aaf83226ca00a3395292cc8f884bdc523a44c2fd431c7b
-
Size
84KB
-
Sample
221203-3mjnpsbd8v
-
MD5
ab811a9e4cc9fe3dfddff5f6635b599b
-
SHA1
cbe804bc2ce4a20281d33f1af5d99931e2162ff7
-
SHA256
55dbdb84c40d9dc8c5aaf83226ca00a3395292cc8f884bdc523a44c2fd431c7b
-
SHA512
08d8e82f4e9859c375644793aaf58ff15e47a3c5acf0db5700f368f40427a49c58d1fac862c593dda493d7f66ab224d35136d74950dacc819824e47f1243211c
-
SSDEEP
1536:QahOrhUNuV9NnkqnhhWMC8tOadBvwZoXRUqHekyN/1H5xuM8b/3d:Q5JxkqnhhWMhtOqcoXRUq+xN/1Zx2r3
Behavioral task
behavioral1
Sample
55dbdb84c40d9dc8c5aaf83226ca00a3395292cc8f884bdc523a44c2fd431c7b
Resource
ubuntu1804-amd64-en-20211208
Malware Config
Extracted
rekoobe
118.24.150.172:0456
www.sydwzl.cn:0456
Targets
-
-
Target
55dbdb84c40d9dc8c5aaf83226ca00a3395292cc8f884bdc523a44c2fd431c7b
-
Size
84KB
-
MD5
ab811a9e4cc9fe3dfddff5f6635b599b
-
SHA1
cbe804bc2ce4a20281d33f1af5d99931e2162ff7
-
SHA256
55dbdb84c40d9dc8c5aaf83226ca00a3395292cc8f884bdc523a44c2fd431c7b
-
SHA512
08d8e82f4e9859c375644793aaf58ff15e47a3c5acf0db5700f368f40427a49c58d1fac862c593dda493d7f66ab224d35136d74950dacc819824e47f1243211c
-
SSDEEP
1536:QahOrhUNuV9NnkqnhhWMC8tOadBvwZoXRUqHekyN/1H5xuM8b/3d:Q5JxkqnhhWMhtOqcoXRUq+xN/1Zx2r3
Score8/10-
Writes DNS configuration
Writes data to DNS resolver config file.
-
Writes file to tmp directory
Malware often drops required files in the /tmp directory.
-