rekoobe | 8ec87dee13de3281d55f7d1d3b48115a0f5e4a41bfbef1ea08e496ac529829c8 | Triage

Sharing

General

Target

8ec87dee13de3281d55f7d1d3b48115a0f5e4a41bfbef1ea08e496ac529829c8
Size

81KB
Sample

221203-3nh4kabe6v
MD5

97db3f7676380f0baa3840ed5d5c1767
SHA1

4fe8efef8c2e7cc3bafee19da8b223daae2242a1
SHA256

8ec87dee13de3281d55f7d1d3b48115a0f5e4a41bfbef1ea08e496ac529829c8
SHA512

50b941340b705238c8f984072611ea8e39267b2a41a0828b892e92edb8090ebed58b92622974f0dec7410a80cc78199139e8154f254040dd4e7ec5cb78c186ec
SSDEEP

1536:mihlrshQNuVhNnUinhhWbCh+Kh0MqHekyN/1H5xuM8gya:mXhFlUinhhWbCh+ohq+xN/1Zx2gy

Score

10^/10

rekoobe linux

Malware Config

Extracted

Family

rekoobe

C2

1.117.165.141:53

Targets

- Target
  
  8ec87dee13de3281d55f7d1d3b48115a0f5e4a41bfbef1ea08e496ac529829c8
- Size
  
  81KB
- MD5
  
  97db3f7676380f0baa3840ed5d5c1767
- SHA1
  
  4fe8efef8c2e7cc3bafee19da8b223daae2242a1
- SHA256
  
  8ec87dee13de3281d55f7d1d3b48115a0f5e4a41bfbef1ea08e496ac529829c8
- SHA512
  
  50b941340b705238c8f984072611ea8e39267b2a41a0828b892e92edb8090ebed58b92622974f0dec7410a80cc78199139e8154f254040dd4e7ec5cb78c186ec
- SSDEEP
  
  1536:mihlrshQNuVhNnUinhhWbCh+Kh0MqHekyN/1H5xuM8gya:mXhFlUinhhWbCh+ohq+xN/1Zx2gy
Score

8^/10
- Writes DNS configuration
  Writes data to DNS resolver config file.
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Dynamic Resolution

Impact

Tasks

static1

behavioral1