Resubmissions

17-10-2024 21:05

241017-zxmlkazbjj 10

14-10-2024 15:29

241014-swwphs1gqb 10

General

  • Target

    na.elf

  • Size

    84KB

  • Sample

    241014-swwphs1gqb

  • MD5

    0e2c42cc4fb874757cee08ed29b134b4

  • SHA1

    9b5d9233bbc22cc5a7cdaa858ae365b425a02171

  • SHA256

    a1c0b48199e8a47fe50c4097d86e5f43a1a1c9a9c1f7f3606ffa0d45bb4a2eb3

  • SHA512

    7c9af743d13826ebf0c1fd2f29201471060727e66296a8432046bb8f1a8d73a7b385fb7feade00acabc84c9366b89db0e6d96f0722af0e4f672e8e194d9443a7

  • SSDEEP

    1536:QahOrhUNuV9NnkqnhhWMC8tOadBvwZoXRUqHekyN/1H5xuM8b/3d:Q5JxkqnhhWMhtOqcoXRUq+xN/1Zx2r3

Malware Config

Extracted

Family

rekoobe

C2

27.124.45.146:12345

Targets

    • Target

      na.elf

    • Size

      84KB

    • MD5

      0e2c42cc4fb874757cee08ed29b134b4

    • SHA1

      9b5d9233bbc22cc5a7cdaa858ae365b425a02171

    • SHA256

      a1c0b48199e8a47fe50c4097d86e5f43a1a1c9a9c1f7f3606ffa0d45bb4a2eb3

    • SHA512

      7c9af743d13826ebf0c1fd2f29201471060727e66296a8432046bb8f1a8d73a7b385fb7feade00acabc84c9366b89db0e6d96f0722af0e4f672e8e194d9443a7

    • SSDEEP

      1536:QahOrhUNuV9NnkqnhhWMC8tOadBvwZoXRUqHekyN/1H5xuM8b/3d:Q5JxkqnhhWMhtOqcoXRUq+xN/1Zx2r3

    • Rekoobe

      A Trojan for Linux intended to infect machines with the SPARC architecture and Intel x86, x86-64 computers.

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks