[Intel]: https://asec.ahnlab.com/ko/55070/

[timb-machine]

Area

Malware reports

Parent threat

Command and Control, Defense Evasion

Finding

https://asec.ahnlab.com/ko/55070/

Industry reference

#722
attack:T1036.005:Match Legitimate Name or Location
attack:T1573.001:Symmetric Encryption
uses:ProcessTreeSpoofing

Malware reference

Rekoobe
TINYSHELL

Actor reference

APT31

Component

Linux, Solaris

Scenario

No response