General

  • Target

    images.cgi.virus

  • Size

    104KB

  • Sample

    230313-j7m23shd34

  • MD5

    2dab8f1f93c1c3b53827f1e888cb0a09

  • SHA1

    f6e4aac6cb689857c1c4db215b58575120e2b52d

  • SHA256

    24bdc0b4448e6671fbc0f772374a9e98f3b6102c6c126f1415618fc185204d60

  • SHA512

    ff666cc9b0f2ef6eb8f134bf922943c1ebfbbb0b7f30a0ccd95ad0d1597366f1aece2bd1301cf0257fdc460edfdb507b37a6bc3e994595e0b6f40400b304b74f

  • SSDEEP

    3072:+lKV9c01nhhWSOYDXPhHpq+xN/1Zx2G0wXE:MKVe01nhhiYThjHywX

Score
10/10

Malware Config

Extracted

Family

rekoobe

C2

45.136.13.211:80

Targets

    • Target

      images.cgi.virus

    • Size

      104KB

    • MD5

      2dab8f1f93c1c3b53827f1e888cb0a09

    • SHA1

      f6e4aac6cb689857c1c4db215b58575120e2b52d

    • SHA256

      24bdc0b4448e6671fbc0f772374a9e98f3b6102c6c126f1415618fc185204d60

    • SHA512

      ff666cc9b0f2ef6eb8f134bf922943c1ebfbbb0b7f30a0ccd95ad0d1597366f1aece2bd1301cf0257fdc460edfdb507b37a6bc3e994595e0b6f40400b304b74f

    • SSDEEP

      3072:+lKV9c01nhhWSOYDXPhHpq+xN/1Zx2G0wXE:MKVe01nhhiYThjHywX

    Score
    8/10
    • Writes DNS configuration

      Writes data to DNS resolver config file.

MITRE ATT&CK Enterprise v6

Tasks