rekoobe | da641f86f81f6333f2730795de93ad2a25ab279a527b8b9e9122b934a730ab08 | Triage

Sharing

General

Target

da641f86f81f6333f2730795de93ad2a25ab279a527b8b9e9122b934a730ab08
Size

84KB
Sample

221203-3nbdqaff64
MD5

d75ecc784b27c06d3d56c28f6560ec41
SHA1

8d4f1d20c0b55c4c22971837482b0b8a5e93480a
SHA256

da641f86f81f6333f2730795de93ad2a25ab279a527b8b9e9122b934a730ab08
SHA512

77c290c68b61a7f99dd1331d2427f14857fff72b81d1e5f4d510f758c91de4d82d2f0310840267bbcd1f3f041717cf8236ed8ecf0ce3a1a75bfb1c824d0f014f
SSDEEP

1536:QahOrhUNuV9NnkqnhhWMC8tOadBvwZoXRUqHekyN/1H5xuM8b/3d:Q5JxkqnhhWMhtOqcoXRUq+xN/1Zx2r3

Score

10^/10

rekoobe linux

Malware Config

Extracted

Family

rekoobe

C2

118.24.150.172:1234

Targets

- Target
  
  da641f86f81f6333f2730795de93ad2a25ab279a527b8b9e9122b934a730ab08
- Size
  
  84KB
- MD5
  
  d75ecc784b27c06d3d56c28f6560ec41
- SHA1
  
  8d4f1d20c0b55c4c22971837482b0b8a5e93480a
- SHA256
  
  da641f86f81f6333f2730795de93ad2a25ab279a527b8b9e9122b934a730ab08
- SHA512
  
  77c290c68b61a7f99dd1331d2427f14857fff72b81d1e5f4d510f758c91de4d82d2f0310840267bbcd1f3f041717cf8236ed8ecf0ce3a1a75bfb1c824d0f014f
- SSDEEP
  
  1536:QahOrhUNuV9NnkqnhhWMC8tOadBvwZoXRUqHekyN/1H5xuM8b/3d:Q5JxkqnhhWMhtOqcoXRUq+xN/1Zx2r3
Score

8^/10
- Writes DNS configuration
  Writes data to DNS resolver config file.
- Writes file to tmp directory
  Malware often drops required files in the /tmp directory.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Dynamic Resolution

Impact

Tasks

static1

behavioral1