Analysis
-
max time kernel
76s -
max time network
85s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
21/06/2022, 03:36
General
-
Target
7c09a54191495c699c04be9e0e2d97cf91d9c4346a37ad751416a2db52636de2.exe
-
Size
417.2MB
-
MD5
d84e24263177be9ad620752ae206bd30
-
SHA1
c2e8eb9ee919a80beb809af3317d8d54a17ae12d
-
SHA256
7c09a54191495c699c04be9e0e2d97cf91d9c4346a37ad751416a2db52636de2
-
SHA512
742f37c34868b7c49430f84e31be343c69ac7d87958a7b05cad2784f3c1f6517d594eb49308c68612a5ecaf14ad8fd649cd908d5a1d176dd40ca0bfbd458f5e2
Score
10/10
Malware Config
Extracted
Family
recordbreaker
C2
http://fall2sleep.xyz/
http://cool-story.xyz/
Signatures
-
Raccoon ver2 4 IoCs
Raccoon ver2.
-
RecordBreaker
RecordBreaker is an information stealer capable of downloading and executing secondary payloads written in C++.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7c09a54191495c699c04be9e0e2d97cf91d9c4346a37ad751416a2db52636de2.exe"C:\Users\Admin\AppData\Local\Temp\7c09a54191495c699c04be9e0e2d97cf91d9c4346a37ad751416a2db52636de2.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.1MB
-
Filesize
8KB
-
Filesize
10.1MB
-
Filesize
10.1MB
-
Filesize
10.1MB