General

  • Target

    7322fbc16e20a7ef2a3188638014a053c6948d9e34ecd42cb9771bdcd0f82db0

  • Size

    55KB

  • Sample

    220616-t2qwwsafa4

  • MD5

    1e682d91b86e5d1059496ef5c9404a83

  • SHA1

    b997c212dee402190a4fe7562fa68f565c084711

  • SHA256

    7322fbc16e20a7ef2a3188638014a053c6948d9e34ecd42cb9771bdcd0f82db0

  • SHA512

    e00e985da0097f7f743c82ab46b09e5c4b9c6aa03c7f28310a23ecc1167b5c4a21cf4490c6081c201e962ba830acaa04ef11eb40f4e1451a2d0e199e84e2d130

Malware Config

Extracted

Family

recordbreaker

C2

http://185.225.19.198/

Targets

    • Target

      7322fbc16e20a7ef2a3188638014a053c6948d9e34ecd42cb9771bdcd0f82db0

    • Size

      55KB

    • MD5

      1e682d91b86e5d1059496ef5c9404a83

    • SHA1

      b997c212dee402190a4fe7562fa68f565c084711

    • SHA256

      7322fbc16e20a7ef2a3188638014a053c6948d9e34ecd42cb9771bdcd0f82db0

    • SHA512

      e00e985da0097f7f743c82ab46b09e5c4b9c6aa03c7f28310a23ecc1167b5c4a21cf4490c6081c201e962ba830acaa04ef11eb40f4e1451a2d0e199e84e2d130

    • RecordBreaker

      RecordBreaker is an information stealer capable of downloading and executing secondary payloads written in C++.

    • suricata: ET MALWARE Generic Stealer Config Download Request

      suricata: ET MALWARE Generic Stealer Config Download Request

    • suricata: ET MALWARE Recordbreaker Stealer CnC Checkin

      suricata: ET MALWARE Recordbreaker Stealer CnC Checkin

MITRE ATT&CK Matrix

Tasks