[Intel]: https://asec.ahnlab.com/en/55229/

[timb-machine]

Area

Malware reports

Parent threat

Defense Evasion, Command and Control

Finding

https://asec.ahnlab.com/en/55229/

Industry reference

#709
attack:T1036.005:Match Legitimate Name or Location
attack:T1573.001:Symmetric Encryption
uses:ProcessTreeSpoofing

Malware reference

Rekoobe
TINYSHELL

Actor reference

APT31

Component

Linux, Solaris

Scenario

No response