General
-
Target
0adc96946d9806969375212cfd5012f93cb205c1008b935f6886ba0ffe7fe262
-
Size
1.4MB
-
Sample
220621-dtyc1acda3
-
MD5
3489c407c7328f4976d5b490aad8b145
-
SHA1
992a53af7a34ed38ebdac5517e067ac029a4bdb2
-
SHA256
0adc96946d9806969375212cfd5012f93cb205c1008b935f6886ba0ffe7fe262
-
SHA512
e3c479f3c46e5bb036129fe14e2eb42b0bfa4d0fd80af0617a953f7f86f1deb13af778272d07c4ec24785469681ca3d748f676ab8597c46e944f09bf8ad25e2f
Static task
static1
Behavioral task
behavioral1
Sample
0adc96946d9806969375212cfd5012f93cb205c1008b935f6886ba0ffe7fe262.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
0adc96946d9806969375212cfd5012f93cb205c1008b935f6886ba0ffe7fe262.exe
Resource
win10-20220414-en
Malware Config
Extracted
recordbreaker
http://51.195.166.184/
Targets
-
-
Target
0adc96946d9806969375212cfd5012f93cb205c1008b935f6886ba0ffe7fe262
-
Size
1.4MB
-
MD5
3489c407c7328f4976d5b490aad8b145
-
SHA1
992a53af7a34ed38ebdac5517e067ac029a4bdb2
-
SHA256
0adc96946d9806969375212cfd5012f93cb205c1008b935f6886ba0ffe7fe262
-
SHA512
e3c479f3c46e5bb036129fe14e2eb42b0bfa4d0fd80af0617a953f7f86f1deb13af778272d07c4ec24785469681ca3d748f676ab8597c46e944f09bf8ad25e2f
Score10/10-
Raccoon ver2
Raccoon ver2.
-
RecordBreaker
RecordBreaker is an information stealer capable of downloading and executing secondary payloads written in C++.
-
suricata: ET MALWARE Generic Stealer Config Download Request
suricata: ET MALWARE Generic Stealer Config Download Request
-
suricata: ET MALWARE Recordbreaker Stealer CnC Checkin
suricata: ET MALWARE Recordbreaker Stealer CnC Checkin
-
Suspicious use of SetThreadContext
-