General
-
Target
da641f86f81f6333f2730795de93ad2a25ab279a527b8b9e9122b934a730ab08
-
Size
84KB
-
Sample
221203-3nbdqaff64
-
MD5
d75ecc784b27c06d3d56c28f6560ec41
-
SHA1
8d4f1d20c0b55c4c22971837482b0b8a5e93480a
-
SHA256
da641f86f81f6333f2730795de93ad2a25ab279a527b8b9e9122b934a730ab08
-
SHA512
77c290c68b61a7f99dd1331d2427f14857fff72b81d1e5f4d510f758c91de4d82d2f0310840267bbcd1f3f041717cf8236ed8ecf0ce3a1a75bfb1c824d0f014f
-
SSDEEP
1536:QahOrhUNuV9NnkqnhhWMC8tOadBvwZoXRUqHekyN/1H5xuM8b/3d:Q5JxkqnhhWMhtOqcoXRUq+xN/1Zx2r3
Behavioral task
behavioral1
Sample
da641f86f81f6333f2730795de93ad2a25ab279a527b8b9e9122b934a730ab08
Resource
ubuntu1804-amd64-20221111-en
Malware Config
Extracted
rekoobe
118.24.150.172:1234
Targets
-
-
Target
da641f86f81f6333f2730795de93ad2a25ab279a527b8b9e9122b934a730ab08
-
Size
84KB
-
MD5
d75ecc784b27c06d3d56c28f6560ec41
-
SHA1
8d4f1d20c0b55c4c22971837482b0b8a5e93480a
-
SHA256
da641f86f81f6333f2730795de93ad2a25ab279a527b8b9e9122b934a730ab08
-
SHA512
77c290c68b61a7f99dd1331d2427f14857fff72b81d1e5f4d510f758c91de4d82d2f0310840267bbcd1f3f041717cf8236ed8ecf0ce3a1a75bfb1c824d0f014f
-
SSDEEP
1536:QahOrhUNuV9NnkqnhhWMC8tOadBvwZoXRUqHekyN/1H5xuM8b/3d:Q5JxkqnhhWMhtOqcoXRUq+xN/1Zx2r3
Score8/10-
Writes DNS configuration
Writes data to DNS resolver config file.
-
Writes file to tmp directory
Malware often drops required files in the /tmp directory.
-