Analysis

  • max time kernel
    42s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    16/06/2022, 16:33

General

  • Target

    f7b1aaae018d5287444990606fc43a0f2deb4ac0c7b2712cc28331781d43ae27.exe

  • Size

    55KB

  • MD5

    eca370e62443218965eb27b1a61bb7a0

  • SHA1

    4e48d0c38e0a4543137cd381abb38e6bd17f17aa

  • SHA256

    f7b1aaae018d5287444990606fc43a0f2deb4ac0c7b2712cc28331781d43ae27

  • SHA512

    6e0554a49c509a3c1c29f042746d18f924417692f3d4c2e8f55676bcc8bb7574ff3a8d4c131634601bd3da28c7c4ef4282c7002bb2a88a69c40e73aa23d58c81

Malware Config

Signatures

  • RecordBreaker

    RecordBreaker is an information stealer capable of downloading and executing secondary payloads written in C++.

  • suricata: ET MALWARE Generic Stealer Config Download Request

    suricata: ET MALWARE Generic Stealer Config Download Request

  • suricata: ET MALWARE Recordbreaker Stealer CnC Checkin

    suricata: ET MALWARE Recordbreaker Stealer CnC Checkin

Processes

  • C:\Users\Admin\AppData\Local\Temp\f7b1aaae018d5287444990606fc43a0f2deb4ac0c7b2712cc28331781d43ae27.exe
    "C:\Users\Admin\AppData\Local\Temp\f7b1aaae018d5287444990606fc43a0f2deb4ac0c7b2712cc28331781d43ae27.exe"
    1⤵
      PID:1664

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1664-54-0x0000000076011000-0x0000000076013000-memory.dmp

      Filesize

      8KB