General

  • Target

    file.7z

  • Size

    6.3MB

  • Sample

    220610-wqa3eaeadj

  • MD5

    44e3977e211eaf0a3d185eacaded315e

  • SHA1

    1b45a678af55371da390b7c96acc9e36e3abf99c

  • SHA256

    1d7f1d8f1bd2d985c830f0b119cceaa6694575361a58bbe383c8c063d57a768b

  • SHA512

    5547c56a17bf9ae32fc033c16f23e9e2d79cadb0b2d7b58183f033261f68ec5203311e8bd81323f004aae0159656b49b2974009d44bde87bddb73d1576f5137e

Malware Config

Extracted

Family

recordbreaker

C2

http://retro-rave.xyz/

Targets

    • Target

      d3b492cf1b98b184b1a6c24c79c57bf8acd7c67fde824192819e07f597b3a997

    • Size

      417.1MB

    • MD5

      b0bc998182378e73e2847975cc6f7eb3

    • SHA1

      4bde7eb36676d9c980588988277578240107ddac

    • SHA256

      d3b492cf1b98b184b1a6c24c79c57bf8acd7c67fde824192819e07f597b3a997

    • SHA512

      f9827436002aa145ef2167d89cc311da07d732dc084afe2108dddfb38743115e1aaed23494fda83434dbd6cc970ab6feddf675bd7fe60897e3375d11a7b49fb7

    • RecordBreaker

      RecordBreaker is an information stealer capable of downloading and executing secondary payloads written in C++.

    • suricata: ET MALWARE Generic Stealer Config Download Request

      suricata: ET MALWARE Generic Stealer Config Download Request

    • suricata: ET MALWARE Recordbreaker Stealer CnC Checkin

      suricata: ET MALWARE Recordbreaker Stealer CnC Checkin

MITRE ATT&CK Matrix

Tasks