Overview

overview

10

Static

static

winprofile

windows7_x64

10

winprofile

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae46253a19c9e846c405b3926655efead40d8f873fef008f896019f34d486dfe

  • Size

    7.2MB

  • Sample

    220621-eatfdaagbl

  • MD5

    fc0c8c94d1c1463033a52735b09b8543

  • SHA1

    a389c3e50ad4126db350a8a152a328c6940a45a8

  • SHA256

    ae46253a19c9e846c405b3926655efead40d8f873fef008f896019f34d486dfe

  • SHA512

    26ff92befc374874331268ba9f39b2cc3b88dd0d102e6f8c5c7fb1147a09f92d5ba039f37a20b7d9a616c5826ccf72e332287c9787ec39e46003a28896a338ce

Score
10/10
recordbreakerstealersuricata

Malware Config

Targets

    • Target

      ae46253a19c9e846c405b3926655efead40d8f873fef008f896019f34d486dfe

    • Size

      7.2MB

    • MD5

      fc0c8c94d1c1463033a52735b09b8543

    • SHA1

      a389c3e50ad4126db350a8a152a328c6940a45a8

    • SHA256

      ae46253a19c9e846c405b3926655efead40d8f873fef008f896019f34d486dfe

    • SHA512

      26ff92befc374874331268ba9f39b2cc3b88dd0d102e6f8c5c7fb1147a09f92d5ba039f37a20b7d9a616c5826ccf72e332287c9787ec39e46003a28896a338ce

    Score
    10/10
    recordbreakerstealersuricata

    • Raccoon ver2

      Raccoon ver2.

    • RecordBreaker

      RecordBreaker is an information stealer capable of downloading and executing secondary payloads written in C++.

      stealerrecordbreaker

    • suricata: ET MALWARE Generic Stealer Config Download Request

      suricata: ET MALWARE Generic Stealer Config Download Request

      suricata

    • suricata: ET MALWARE Recordbreaker Stealer CnC Checkin

      suricata: ET MALWARE Recordbreaker Stealer CnC Checkin

      suricata

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks