Analysis

  • max time kernel
    57s
  • max time network
    78s
  • platform
    windows10_x64
  • resource
    win10-20220414-en
  • submitted
    20/06/2022, 20:48

General

  • Target

    6da2a6f1037e65427460c225e124d058bedf657143700f33ed04dbc3c2cdd05c.exe

  • Size

    305KB

  • MD5

    ba8a6cc7b53a4de1d54191d8dbe16236

  • SHA1

    56768bfe175c7a724f991ea831eb1d62d08412e8

  • SHA256

    6da2a6f1037e65427460c225e124d058bedf657143700f33ed04dbc3c2cdd05c

  • SHA512

    9a0da760b8e57ba2db7d7cbc84f9af35715c89d33f681364db3dedb19774654953e3b70944b01a2b6ee42b6a683ff819d6df965b1b57cb13414f58009d2380fc

Score
10/10

Malware Config

Extracted

Family

recordbreaker

C2

http://94.158.247.92/

Signatures

  • RecordBreaker

    RecordBreaker is an information stealer capable of downloading and executing secondary payloads written in C++.

Processes

  • C:\Users\Admin\AppData\Local\Temp\6da2a6f1037e65427460c225e124d058bedf657143700f33ed04dbc3c2cdd05c.exe
    "C:\Users\Admin\AppData\Local\Temp\6da2a6f1037e65427460c225e124d058bedf657143700f33ed04dbc3c2cdd05c.exe"
    1⤵
      PID:4692

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4692-117-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-118-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-119-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-120-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-121-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-122-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-123-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-124-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-125-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-126-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-127-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-128-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-129-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-130-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-131-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-132-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-133-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-134-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-135-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-136-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-137-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-138-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-139-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-140-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-141-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-142-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-143-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-144-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-146-0x0000000002EAA000-0x0000000002EB8000-memory.dmp

      Filesize

      56KB

    • memory/4692-145-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-148-0x0000000004980000-0x000000000498F000-memory.dmp

      Filesize

      60KB

    • memory/4692-149-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-147-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-150-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-151-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-152-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-153-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-154-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-155-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-157-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-156-0x0000000000400000-0x0000000002C6B000-memory.dmp

      Filesize

      40.4MB

    • memory/4692-158-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-159-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-160-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-161-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-162-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-163-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-164-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-165-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-166-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-167-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-168-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-169-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-170-0x0000000077670000-0x00000000777FE000-memory.dmp

      Filesize

      1.6MB

    • memory/4692-171-0x0000000002EAA000-0x0000000002EB8000-memory.dmp

      Filesize

      56KB

    • memory/4692-172-0x0000000000400000-0x0000000002C6B000-memory.dmp

      Filesize

      40.4MB

    • memory/4692-173-0x0000000002EAA000-0x0000000002EB8000-memory.dmp

      Filesize

      56KB