recordbreaker | 7c09a54191495c699c04be9e0e2d97cf91d9c4346a37ad751416a2db52636de2

Analysis

max time kernel
314s
max time network
319s
platform
windows10_x64
resource
win10-20220414-en
submitted
21/06/2022, 03:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7c09a54191495c699c04be9e0e2d97cf91d9c4346a37ad751416a2db52636de2.exe
Size

417.2MB
MD5

d84e24263177be9ad620752ae206bd30
SHA1

c2e8eb9ee919a80beb809af3317d8d54a17ae12d
SHA256

7c09a54191495c699c04be9e0e2d97cf91d9c4346a37ad751416a2db52636de2
SHA512

742f37c34868b7c49430f84e31be343c69ac7d87958a7b05cad2784f3c1f6517d594eb49308c68612a5ecaf14ad8fd649cd908d5a1d176dd40ca0bfbd458f5e2

Score

10^/10

recordbreaker stealer

Malware Config

Extracted

Family

recordbreaker

http://fall2sleep.xyz/

http://cool-story.xyz/

Signatures

Raccoon ver2 4 IoCs

Raccoon ver2.

resource	yara_rule
behavioral2/memory/4700-139-0x0000000000F70000-0x000000000198E000-memory.dmp	raccoon_v2
behavioral2/memory/4700-150-0x0000000000F70000-0x000000000198E000-memory.dmp	raccoon_v2
behavioral2/memory/4700-172-0x0000000000F70000-0x000000000198E000-memory.dmp	raccoon_v2
behavioral2/memory/4700-173-0x0000000000F70000-0x000000000198E000-memory.dmp	raccoon_v2

RecordBreaker
RecordBreaker is an information stealer capable of downloading and executing secondary payloads written in C++.
stealer recordbreaker

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4700	7c09a54191495c699c04be9e0e2d97cf91d9c4346a37ad751416a2db52636de2.exe
4700	7c09a54191495c699c04be9e0e2d97cf91d9c4346a37ad751416a2db52636de2.exe
4700	7c09a54191495c699c04be9e0e2d97cf91d9c4346a37ad751416a2db52636de2.exe
4700	7c09a54191495c699c04be9e0e2d97cf91d9c4346a37ad751416a2db52636de2.exe

C:\Users\Admin\AppData\Local\Temp\7c09a54191495c699c04be9e0e2d97cf91d9c4346a37ad751416a2db52636de2.exe
"C:\Users\Admin\AppData\Local\Temp\7c09a54191495c699c04be9e0e2d97cf91d9c4346a37ad751416a2db52636de2.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4700-117-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-118-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-119-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-120-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-121-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-122-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-123-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-124-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-125-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-126-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-127-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-128-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-129-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-131-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-130-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-132-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-133-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-134-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-136-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-137-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-138-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-135-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-139-0x0000000000F70000-0x000000000198E000-memory.dmp

Filesize
10.1MB

Download
memory/4700-141-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-142-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-143-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-144-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-146-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-145-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-147-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-148-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-150-0x0000000000F70000-0x000000000198E000-memory.dmp

Filesize
10.1MB

Download
memory/4700-149-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-151-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-152-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-153-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-154-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-155-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-156-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-157-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-158-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-160-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-159-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-161-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-162-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-163-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-164-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-165-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-166-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-167-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-168-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-169-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-170-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-171-0x0000000077670000-0x00000000777FE000-memory.dmp

Filesize
1.6MB

Download
memory/4700-172-0x0000000000F70000-0x000000000198E000-memory.dmp

Filesize
10.1MB

Download
memory/4700-173-0x0000000000F70000-0x000000000198E000-memory.dmp

Filesize
10.1MB

Download